CVE-2026-109475: .NET Denial of Service Vulnerability
.NET Denial of Service Vulnerability
Other sources
Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.15Patch KB5135241 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.0.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.23Patch KB5135242 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.0.34Patch KB5135243
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is reachable over a network and requires no authentication, privileges, or user interaction according to the supplied vector.
Which systems are most exposed?
Microsoft .NET deployments that accept network-reachable input are the relevant exposure boundary. The reported impact is denial of service, with no confidentiality or integrity impact indicated.