CVE record · 3 sources
CVE-2026-92707
CVSS 5.3MessagePack for C# is a MessagePack serializer for C#.
- Vendor
- Microsoft, Adobe
- CVSS
- 5.3
- EPSS
- 0.007 (p52)
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The October 2026 Security Update Review
Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland , because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I…
-
CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability
Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.
-
MessagePack for C# is a MessagePack serializer for C#.
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The…