Skip to content
fr Sign in
7.5 High

CVE-2026-84008 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network

Description

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft .NET Framework 3.5 3.5 3.5.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0 3.0.0.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.7.2 4.7 4.7.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.8 4.8 4.8.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.8.1 4.8 4.8.1 → latest No fix stated
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 4.7.0 → < 4.7.4150.0 4.7.4150.0
Microsoft .NET Framework 4.8 4.8 4.8.0 → < 4.8.4811.0 4.8.4811.0
Microsoft .NET Framework 4.8.1 4.8 4.8.0.0 → < 4.8.9363.0 4.8.9363.0
Microsoft Visual Studio 2022 version 17.14 17.14 17.14.0 → < 17.14.42 17.14.42
Show the 2 other branches
Product Affected versions Fixed in
Microsoft Visual Studio 2026 version 18.10 18.10 18.10.0 → < 18.10.4 18.10.4
System.Security.Cryptography.Pkcs 10.0 10.0.0 → < 10.0.13 10.0.13

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft .NET Framework 3.5

The 83 CVEs of Microsoft .NET Framework 3.5 →
CVE-2026-97801 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering… 7.5 High CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-97788 Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose… 7.5 High CVE-2026-96959 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 High
Track this CVE