CVE-2024-21404
HighCVSS 7.5Exploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
A vulnerability in .NET allows denial of service (DoS).
Risk Assessment
An attacker could cause overload of .NET-based applications, potentially leading to service unavailability.
Recommendation
Update .NET to the latest patched version.
Other vulnerabilities in .NET
See all- CVE-2026-70354High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-62909High
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-62902Medium
An inclusion of functionality from untrusted control sphere vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62901High
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-62900Medium
An improper removal of sensitive information before storage or transfer vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62899Medium
An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-62886High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-62871High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-58641High
An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-50659Medium
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Original NVD description (English source)
.NET Denial of Service Vulnerability