CVE-2026-33116

Medienbericht

EPSS 2.14%
Veröffentlicht 14.04.2026 16:57:47
Zuletzt bearbeitet 30.06.2026 03:18:35
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 4 Referenzen 25

NVD 15 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ .Net Version >= 10.0.0 < 10.0.6

Apple ≫ macOS Version-
Linux ≫ Linux Kernel Version-

Microsoft ≫ .Net Version >= 8.0.0 < 8.0.26

   Apple ≫ macOS Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-

Microsoft ≫ .Net Version >= 9.0.0 < 9.0.15

   Apple ≫ macOS Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-

Microsoft ≫ .Net Framework Version3.5 Update-

Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ Windows Server 2012 Versionr2

Microsoft ≫ .Net Framework Version3.5 Update-

   Microsoft ≫ Windows 10 1809 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86

Microsoft ≫ .Net Framework Version4.7.2

   Microsoft ≫ Windows 10 1809 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86

Microsoft ≫ .Net Framework Version4.6.2

Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ Windows Server 2012 Versionr2

Microsoft ≫ .Net Framework Version4.7

Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ Windows Server 2012 Versionr2

Microsoft ≫ .Net Framework Version4.7.1

Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ Windows Server 2012 Versionr2

Microsoft ≫ .Net Framework Version4.7.2

Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ Windows Server 2012 Versionr2

Microsoft ≫ .Net Framework Version3.5 Update-

   Microsoft ≫ Windows 10 1809 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx86
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx86
   Microsoft ≫ Windows Server 2022 Version-

Microsoft ≫ .Net Framework Version4.8

Microsoft ≫ .Net Framework Version3.5 Update-

   Microsoft ≫ Windows 10 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx86
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx86
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 24h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 24h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 25h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 25h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 26h1 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 26h1 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2022 Version-
   Microsoft ≫ Windows Server 2022 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2025 Version- HwPlatformx64

Microsoft ≫ .Net Framework Version4.8.1

Microsoft ≫ .Net Framework Version4.8

   Microsoft ≫ Windows 10 1607 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1607 Version- HwPlatformx86
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.14%	0.798

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
secure@microsoft.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

14.04.2026 19:52

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116

Vendor Advisory

https://access.redhat.com/errata/RHSA-2026:13280

https://access.redhat.com/errata/RHSA-2026:13281

https://access.redhat.com/errata/RHSA-2026:13282

https://access.redhat.com/errata/RHSA-2026:13283

https://access.redhat.com/errata/RHSA-2026:13693

https://access.redhat.com/errata/RHSA-2026:8467

https://access.redhat.com/errata/RHSA-2026:8468

https://access.redhat.com/errata/RHSA-2026:8469

https://access.redhat.com/errata/RHSA-2026:8470

https://access.redhat.com/errata/RHSA-2026:8471

https://access.redhat.com/errata/RHSA-2026:8472

https://access.redhat.com/errata/RHSA-2026:8473

https://access.redhat.com/errata/RHSA-2026:8474

https://access.redhat.com/errata/RHSA-2026:8475

https://access.redhat.com/errata/RHSA-2026:9077

https://access.redhat.com/errata/RHSA-2026:9080

https://access.redhat.com/errata/RHSA-2026:9205

https://access.redhat.com/security/cve/CVE-2026-33116

https://bugzilla.redhat.com/show_bug.cgi?id=2457741

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json

https://nvd.nist.gov/vuln/detail/CVE-2026-33116

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-33116

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-33116

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-33116