Skip to content
Sign in
7.5 High

CVE-2026-23666 Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network

Description

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft .NET Framework 3.5 3.5 3.5.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.7.2 4.7 4.7.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.8 4.8 4.8.0 → latest No fix stated
Microsoft .NET Framework 3.5 AND 4.8.1 4.8 4.8.1 → latest No fix stated
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 4.7.0 → < 4.8.4801.0 4.8.4801.0
Microsoft .NET Framework 4.8 4.8 4.8.0 → < 4.8.4801.0 4.8.4801.0
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Show the other branch
Product Affected versions Fixed in
Red Hat Hardened Images Versions not published

Other CVEs of Microsoft .NET Framework 3.5

The 83 CVEs of Microsoft .NET Framework 3.5 →
CVE-2026-97801 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering… 7.5 High CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-97788 Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose… 7.5 High CVE-2026-96959 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 High
Track this CVE