p PatchFirst

CVE-2026-26127

CVE-2026-26127 · .NET Denial of Service Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

CVSS 7.5 · High · EPSS 2.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 10.0

    Versions
    • ≥ 10.0.0, < 10.0.4: Affected (custom)

    Update to 10.0.4

  • .net 9.0

    Versions
    • ≥ 9.0.0, < 9.0.14: Affected (custom)

    Update to 9.0.14

  • microsoft.bcl.memory

    Versions
    • ≥ 10.0.0, < 10.0.4: Affected (custom)

    Update to 10.0.4

  • microsoft.bcl.memory

    Versions
    • ≥ 9.0.0, < 9.0.14: Affected (custom)

    Update to 9.0.14

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    • 7.0.114-0ubuntu1~22.04.1
    • 7.0.115-0ubuntu1~22.04.1
    • 7.0.116-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.2
    • 7.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet10 Ubuntu:24.04:LTS

    Versions
    • 10.0.100-10.0.0-0ubuntu1~24.04.1
    • 10.0.101-10.0.1-0ubuntu1~24.04.2
    • 10.0.103-10.0.3-0ubuntu1~24.04.1
    Affected ranges
    • ECOSYSTEM: < 10.0.104-10.0.4-0ubuntu1~24.04.1

    Update to 10.0.104-10.0.4-0ubuntu1~24.04.1

  • dotnet10 Ubuntu:25.10

    Versions
    • 10.0.100-10.0.0~rc1-0ubuntu1
    • 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2
    • 10.0.100-10.0.0-0ubuntu1~25.10.1
    • 10.0.101-10.0.1-0ubuntu1~25.10.2
    • 10.0.103-10.0.3-0ubuntu1~25.10.1
    Affected ranges
    • ECOSYSTEM: < 10.0.104-10.0.4-0ubuntu1~25.10.1

    Update to 10.0.104-10.0.4-0ubuntu1~25.10.1

  • dotnet9 Ubuntu:25.10

    Versions
    • 9.0.105-9.0.4-0ubuntu1
    • 9.0.106-9.0.5-0ubuntu1
    • 9.0.107-9.0.6-0ubuntu1
    • 9.0.108-9.0.7-0ubuntu1
    • 9.0.109-9.0.8-0ubuntu1
    • 9.0.110-9.0.9-0ubuntu1
    • 9.0.111-9.0.10-0ubuntu1~25.10.1
    • 9.0.112-9.0.11-0ubuntu1~25.10.1
    • 9.0.113-9.0.12-0ubuntu1~25.10.1
    • 9.0.114-9.0.13-0ubuntu1~25.10.1
    Affected ranges
    • ECOSYSTEM: < 9.0.115-9.0.14-0ubuntu1~25.10.1

    Update to 9.0.115-9.0.14-0ubuntu1~25.10.1

Original sources

Check your server →