CVE-2026-33116
HighCVSS 7.5Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
A vulnerability in .NET, .NET Framework, and Visual Studio causes an infinite loop, allowing an unauthorized attacker to perform a Denial of Service (DoS) attack over a network.
Risk Assessment
An attacker can remotely overload a server or application, causing it to become unavailable to users, leading to service disruptions and potential financial losses.
Recommendation
Immediately apply security updates provided by Microsoft for .NET, .NET Framework, and Visual Studio to eliminate the infinite loop vulnerability.
Other vulnerabilities in .NET
See all- CVE-2026-70354High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-62909High
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-62902Medium
An inclusion of functionality from untrusted control sphere vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62901High
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-62900Medium
An improper removal of sensitive information before storage or transfer vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62899Medium
An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-62886High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-62871High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-58641High
An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-50659Medium
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Original NVD description (English source)
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.