CVE-2026-120796

Vendor

Microsoft

Product

.NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS, .NET 11.0 installed on Windows, System.Text.Json

CVSS v3.1

5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness

CWE-407

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   Advisory MSRC 3h ago

   .NET Denial of Service Vulnerability

   Changes made to the security updates links and information. This is an informational change only.

   CVE-2026-120796 Microsoft
2. 15
   CVE NVD 24h ago

   Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

   Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

   CVSS 5.3 CVE-2026-120796 Microsoft