5.9

CVE-2026-32226

Medienbericht

.NET Framework Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ .Net Framework Version 3.5 Update -
   Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
Microsoft ≫ .Net Framework Version 4.7.2
   Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
Microsoft ≫ .Net Framework Version 3.5 Update -
   Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
   Microsoft ≫ Windows Server 20h2 Version - HwPlatform x64
Microsoft ≫ .Net Framework Version 4.8
   Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
   Microsoft ≫ Windows Server 20h2 Version - HwPlatform x64
Microsoft ≫ .Net Framework Version 4.8
   Microsoft ≫ Windows 10 1607 Version - HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 3.5 Update -
   Microsoft ≫ Windows 11 26h1 Version - HwPlatform arm64
   Microsoft ≫ Windows 11 26h1 Version - HwPlatform x64
   Microsoft ≫ Windows Server 2025 Version - HwPlatform x64
Microsoft ≫ .Net Framework Version 4.8.1
   Microsoft ≫ Windows 11 26h1 Version - HwPlatform arm64
   Microsoft ≫ Windows 11 26h1 Version - HwPlatform x64
   Microsoft ≫ Windows Server 2025 Version - HwPlatform x64
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.412
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
14.04.2026 19:52
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32226
Vendor Advisory