CVE-2026-33116
HighCVSS 7.5Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
A vulnerability in .NET, .NET Framework, and Visual Studio causes an infinite loop, allowing an unauthorized attacker to perform a Denial of Service (DoS) attack over a network.
Risk Assessment
An attacker can remotely overload a server or application, causing it to become unavailable to users, leading to service disruptions and potential financial losses.
Recommendation
Immediately apply security updates provided by Microsoft for .NET, .NET Framework, and Visual Studio to eliminate the infinite loop vulnerability.
Other vulnerabilities in .NET
See all- CVE-2026-96960High
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-96959High
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-96958High
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-96957High
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-96238Medium
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-96237High
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-96235High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-96234Medium
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-96232High
A vulnerability in .NET allows an unauthorized attacker to read data outside the allowed memory area over a network.
- CVE-2026-96231High
A vulnerability in .NET related to improper link resolution before file access allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS