7.5
High
CVE-2026-109468 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…
Description
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.42 | 17.14.42 |
| Microsoft Visual Studio 2026 version 18.10 18.10 | 18.10.0 → < 18.10.4 | 18.10.4 |
| System.Formats.Cbor 10.0 | 10.0.0 → < 10.0.13 | 10.0.13 |
References
- ASP.NET Core Denial of Service Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2022 version 17.14
The 92 CVEs of Microsoft Visual Studio 2022 version 17.14 →
CVE-2026-118147
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network
7.4
High
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network
9.8
Critical
CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests
5.9
Medium
CVE-2026-102869
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized…
8.8
High