CVE-2026-50525
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
The .NET platform does not limit resource allocation, allowing an unauthorized attacker to perform a denial-of-service attack over a network.
Risk Assessment
The organization is exposed to a DoS attack that can exhaust server resources and disrupt .NET applications.
Recommendation
Apply the security update for .NET provided by the vendor.
Other vulnerabilities in .NET
See all- CVE-2026-70354High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-62909High
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-62902Medium
An inclusion of functionality from untrusted control sphere vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62901High
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-62900Medium
An improper removal of sensitive information before storage or transfer vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62899Medium
An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-62886High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-62871High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-58641High
An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-50659Medium
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Original NVD description (English source)
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.