CVE-2026-109478

Vendor

Microsoft

Product

.NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 8.0 installed on Windows, Microsoft Visual Studio 2022 version 17.14

CVSS v3.1

7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness

CWE-407

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 2h ago

   Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

   Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

   CVSS 7.5 CVE-2026-109478 Microsoft
2. 40
   Advisory MSRC 5h ago

   ASP.NET Core Denial of Service Vulnerability

   Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

   CVE-2026-109478 Microsoft