5.9
Medium
CVE-2026-32226 Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows…
Description
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → latest | No fix stated |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → latest | No fix stated |
| Microsoft .NET Framework 3.5 3.5 | 3.5.0 → latest | No fix stated |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.8.4801.0 | 4.8.4801.0 |
| Microsoft .NET Framework 4.7.2 10.0 | 10.0.0.0 → latest | No fix stated |
| Microsoft .NET Framework 4.8.1 4.8 | 4.8.0.0 → latest | No fix stated |
References
- .NET Framework Denial of Service Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft .NET Framework 3.5 AND 4.7.2
The 80 CVEs of Microsoft .NET Framework 3.5 AND 4.7.2 →
CVE-2026-97801
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering…
7.5
High
CVE-2026-102869
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized…
8.8
High
CVE-2026-58280
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network
7.5
High
CVE-2026-97788
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose…
7.5
High