cyfenced.com →

[ CVE-2026-70162 · Published 13 Oct 2026 ]

Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability

CVSS 5.9 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1316

    Multiple vulnerabilities in Microsoft products Translated from French

    Multiple vulnerabilities have been discovered in Microsoft products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

    CVE-2026-88086CVE-2026-70007CVE-2026-70179+141 more CVEs
  • BSI CERT-BundWID-SEC-2026-3893

    Microsoft Entwicklerwerkzeuge: Multiple vulnerabilities Translated from German

    Risk highCVE-2026-96230CVE-2026-84008CVE-2026-102238+64 more CVEs

[ Packages ]Affected open-source packages

  • System.Security.Cryptography.Pkcs nugetAffected >= 10.0.0, <= 10.0.12 · fixed in 10.0.13 · GHSA-2fmv-rv2c-59x7
  • System.Security.Cryptography.Pkcs nugetAffected >= 11.0.0-preview.1, <= 11.0.0-rc.1 · fixed in 11.0.0-rc.2 · GHSA-2fmv-rv2c-59x7
  • System.Security.Cryptography.Pkcs nugetAffected >= 8.0.0, <= 8.0.1 · fixed in 8.0.2 · GHSA-2fmv-rv2c-59x7
  • System.Security.Cryptography.Pkcs nugetAffected >= 9.0.0, <= 9.0.20 · fixed in 9.0.21 · GHSA-2fmv-rv2c-59x7

[ References ]References