CVE-2026-57108
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
A type confusion vulnerability in .NET Core allows an unauthorized attacker to cause a denial of service over a network.
Risk Assessment
An unauthorized attacker could crash a .NET Core application, leading to service unavailability.
Recommendation
Update .NET Core to a version containing the fix for this vulnerability.
Other vulnerabilities in .NET Core
See all- CVE-2017-11883High
.NET Core versions 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests.
- CVE-2017-11770High
Versions .NET Core 1.0, 1.1, and 2.0 have a vulnerability that allows an unauthenticated attacker to remotely trigger a denial of service attack against a .NET Core web application by improperly parsing certificate data.
- CVE-2020-1108High
Denial of service vulnerability in .NET Core and .NET Framework due to improper handling of web requests. A remote unauthenticated attacker could cause a denial of service by sending specially crafted requests to the application.
- CVE-2026-32175Medium
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.