CVE-2026-109468high7.5
ASP.NET Core Denial of Service Vulnerability
Impact
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · Microsoft Visual Studio 2022 version 17.14
| Version / range | Source status |
|---|---|
| 17.14.0 to before 17.14.42 | affected |
Microsoft · Microsoft Visual Studio 2026 version 18.10
| Version / range | Source status |
|---|---|
| 18.10.0 to before 18.10.4 | affected |
Microsoft · System.Formats.Cbor
Platforms: .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows
| Version / range | Source status |
|---|---|
| 10.0.0 to before 10.0.13 | affected |
Original source description
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.