Read the docs
TI-2026-24756 Aliases CVE-2026-32226GHSA-fpfg-hmcm-qvcj

.NET Framework Denial of Service Vulnerability

Priority LOW 27CWE-362Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Microsoft. Impact type from Microsoft.

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00542 45th percentileScored 2026-11-07
Fix Fixed Microsoft: 18 updates

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftMicrosoft .NET Framework 3.53.5.0 to before 2.0.50727.8982 & 3.0.30729.89762.0.50727.8982 & 3.0.30729.8976Patch availableCNA
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.24.7.0 to before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.02.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 3.5 AND 4.84.8.0 to before 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.02.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8.14.8.1 to before 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.02.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.24.7.0 to before 4.8.4801.04.8.4801.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 4.7.210.0.0.0 to before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.02.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 4.84.8.0 to before 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.02.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0Patch availableCNA
MicrosoftMicrosoft .NET Framework 4.8.14.8.0.0 to before 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.02.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0Patch availableCNA
  • Microsoft .NET Framework 3.5 VendorMicrosoft Affected 3.5.0 to before 2.0.50727.8982 & 3.0.30729.8976 Fixed in 2.0.50727.8982 & 3.0.30729.8976 Patch available CNA
  • Microsoft .NET Framework 3.5 AND 4.7.2 VendorMicrosoft Affected 4.7.0 to before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 Fixed in 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 Patch available CNA
  • Microsoft .NET Framework 3.5 AND 4.8 VendorMicrosoft Affected 4.8.0 to before 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0 Fixed in 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0 Patch available CNA
  • Microsoft .NET Framework 3.5 AND 4.8.1 VendorMicrosoft Affected 4.8.1 to before 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 Fixed in 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 Patch available CNA
  • Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 VendorMicrosoft Affected 4.7.0 to before 4.8.4801.0 Fixed in 4.8.4801.0 Patch available CNA
  • Microsoft .NET Framework 4.7.2 VendorMicrosoft Affected 10.0.0.0 to before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 Fixed in 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 Patch available CNA
  • Microsoft .NET Framework 4.8 VendorMicrosoft Affected 4.8.0 to before 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0 Fixed in 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0 Patch available CNA
  • Microsoft .NET Framework 4.8.1 VendorMicrosoft Affected 4.8.0.0 to before 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 Fixed in 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 Patch available CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*3.5VulnerableMicrosoft
cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*4.7.2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*4.8VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_20h2:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*r2Running onMicrosoft
  • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:* Versions 3.5 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* Versions 4.7.2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:* Versions 4.8 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_20h2:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Running on ·Microsoft
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*4.8.1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:arm64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
cpe:2.3:o:microsoft:windows_server_2025:-:*:*:*:*:*:x64:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:* Versions 4.8.1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:arm64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_26h1:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2025:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft

Remediation

Microsoft 18 updates

  • KB5082427
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0
  • KB5082426
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0
    • Microsoft .NET Framework 4.8 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0
  • KB5082425
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
    • Microsoft .NET Framework 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
Show 15 more Microsoft updates
  • KB5082424
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
    • Microsoft .NET Framework 4.8 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
  • KB5082421
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
  • KB5082420
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
  • KB5082419
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
  • KB5082418
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
  • KB5082417
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8.1 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
  • KB5082414
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.8 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0
  • KB5082413
    Security Update
    • Microsoft .NET Framework 3.5 AND 4.7.2 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0
    • Microsoft .NET Framework 4.7.2 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0
  • KB5082411
    Security Update
    • Microsoft .NET Framework 4.8 4.8.4801.0
  • KB5082406
    Security Update
    • Microsoft .NET Framework 3.5 2.0.50727.8982 & 3.0.30729.8976
  • KB5082404
    Security Update
    • Microsoft .NET Framework 4.8 4.8.4801.0
  • KB5082403
    Security Update
    • Microsoft .NET Framework 4.8 4.8.4801.0
  • KB5082402
    Security Update
    • Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.4141.0
  • KB5082400
    Security Update
    • Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.8.4801.0
  • KB5082398
    Security Update
    • Microsoft .NET Framework 3.5 2.0.50727.8982 & 3.0.30729.8976

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 4 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images

Microsoft

Microsoft's page for this CVE →

Impact
Denial of Service
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-32226
  2. 2026-10-03 Alias added: GHSA-fpfg-hmcm-qvcj
  3. 2026-10-13 EPSS moved to the 50th–90th percentile
  4. 2026-10-25 EPSS moved to the below the 50th percentile

References

Patch 1

  • TI-2020-00622 XML injection in Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01112 A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and… KEVCVSS 3.1HIGH 7.8
  • TI-2017-06273 Code injection in Microsoft .NET Framework KEVCVSS 3.1HIGH 7.8
  • TI-2015-01495 The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1… KEVCVSS 3.1HIGH 7.8
  • TI-2024-19239 .NET Framework Information Disclosure Vulnerability KEVCVSS 3.1HIGH 7.5
  • TI-2023-18684 ASP.NET Elevation of Privilege Vulnerability CVSS 3.1HIGH 8.8
See all 206 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences