CVE-2026-70162

medium

Description

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162

https://github.com/dotnet/runtime/security/advisories/GHSA-2fmv-rv2c-59x7

https://github.com/dotnet/runtime/issues/135699

https://github.com/dotnet/announcements/issues/454

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100402

Details

Source: Mitre, NVD

Published: 2026-10-13

Updated: 2026-10-13

Risk Information

CVSS v2

Base Score: 5.4

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.9

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: Medium