Live · 98 sources · updated 12m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 3 sources

CVE-2026-92707

CVSS 5.3

MessagePack for C# is a MessagePack serializer for C#.

Vendor
Microsoft, Adobe
CVSS
5.3
EPSS
0.007 (p52)

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. Research ZDI

    The October 2026 Security Update Review

    Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland , because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I…

  2. Advisory MSRC

    CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability

    Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.

  3. CVE NVD

    MessagePack for C# is a MessagePack serializer for C#.

    MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The…

    CVSS 5.3 CVE-2026-92707

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help