CVE-2026-33116
CVE-2026-33116 · .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVSS 7.5 · High · EPSS 2.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
.net 10.0
- Versions
- ≥ 10.0.0, < 10.0.6: Affected (custom)
Update to 10.0.6
.net 8.0
- Versions
- ≥ 8.0, < 8.0.26: Affected (custom)
Update to 8.0.26
.net 8.0
- Versions
- ≥ 8.0.0, < 8.0.26: Affected (custom)
Update to 8.0.26
.net 9.0
- Versions
- ≥ 9.0.0, < 9.0.15: Affected (custom)
Update to 9.0.15
microsoft .net framework 3.5
- Versions
- ≥ 3.5.0, < 2.0.50727.8982 & 3.0.30729.8976: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.7.2
- Versions
- ≥ 4.7.0, < 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8
- Versions
- ≥ 4.8.0, < 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8.1
- Versions
- ≥ 4.8.1, < 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0: Affected (custom)
No fix published
microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 4.7.0, < 4.8.4801.0: Affected (custom)
Update to 4.8.4801.0
microsoft .net framework 4.8
- Versions
- ≥ 4.8.0, < 4.8.4801.0: Affected (custom)
Update to 4.8.4801.0
dotnet6 Ubuntu:22.04:LTS
- Versions
- 6.0.108-0ubuntu1~22.04.1
- 6.0.109-0ubuntu1~22.04.1
- 6.0.110-0ubuntu1~22.04.1
- 6.0.111-0ubuntu1~22.04.1
- 6.0.113-0ubuntu1~22.04.1
- 6.0.116-0ubuntu1~22.04.1
- 6.0.118-0ubuntu1~22.04.1
- 6.0.119-0ubuntu1~22.04.1
- 6.0.120-0ubuntu1~22.04.1
- 6.0.121-0ubuntu1~22.04.1
- 6.0.122-0ubuntu1~22.04.1
- 6.0.123-0ubuntu1~22.04.1
- 6.0.124-0ubuntu1~22.04.1
- 6.0.125-0ubuntu1~22.04.1
- 6.0.126-0ubuntu1~22.04.1
- 6.0.127-0ubuntu1~22.04.1
- 6.0.128-0ubuntu1~22.04.2
- 6.0.132-0ubuntu1~22.04.1
- 6.0.133-0ubuntu1~22.04.1
- 6.0.135-0ubuntu1~22.04.1
- 6.0.136-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dotnet7 Ubuntu:22.04:LTS
- Versions
- 7.0.105-0ubuntu1~22.04.1
- 7.0.107-0ubuntu1~22.04.1
- 7.0.108-0ubuntu1~22.04.1
- 7.0.109-0ubuntu1~22.04.1
- 7.0.110-0ubuntu1~22.04.1
- 7.0.111-0ubuntu1~22.04.1
- 7.0.112-0ubuntu1~22.04.1
- 7.0.113-0ubuntu1~22.04.1
- 7.0.114-0ubuntu1~22.04.1
- 7.0.115-0ubuntu1~22.04.1
- 7.0.116-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.2
- 7.0.119-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dotnet8 Ubuntu:22.04:LTS
- Versions
- 8.0.102-8.0.2-0ubuntu1~22.04.1
- 8.0.103-8.0.3-0ubuntu1~22.04.1
- 8.0.103-8.0.3-0ubuntu1~22.04.2
- 8.0.105-8.0.5-0ubuntu1~22.04.1
- 8.0.107-8.0.7-0ubuntu1~22.04.1
- 8.0.108-8.0.8-0ubuntu1~22.04.1
- 8.0.110-8.0.10-0ubuntu1~22.04.1
- 8.0.111-8.0.11-0ubuntu1~22.04.1
- 8.0.112-8.0.12-0ubuntu1~22.04.1
- 8.0.114-8.0.14-0ubuntu1~22.04.1
- 8.0.115-8.0.15-0ubuntu1~22.04.1
- 8.0.116-8.0.16-0ubuntu1~22.04.1
- 8.0.117-8.0.17-0ubuntu1~22.04.1
- 8.0.118-8.0.18-0ubuntu1~22.04.1
- 8.0.119-8.0.19-0ubuntu1~22.04.1
- 8.0.120-8.0.20-0ubuntu1~22.04.1
- 8.0.121-8.0.21-0ubuntu1~22.04.1
- 8.0.122-8.0.22-0ubuntu1~22.04.1
- 8.0.123-8.0.23-0ubuntu1~22.04.1
- 8.0.124-8.0.24-0ubuntu1~22.04.1
- 8.0.125-8.0.25-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: < 8.0.126-8.0.26-0ubuntu1~22.04.1
Update to 8.0.126-8.0.26-0ubuntu1~22.04.1
dotnet10 Ubuntu:24.04:LTS
- Versions
- 10.0.100-10.0.0-0ubuntu1~24.04.1
- 10.0.101-10.0.1-0ubuntu1~24.04.2
- 10.0.103-10.0.3-0ubuntu1~24.04.1
- 10.0.104-10.0.4-0ubuntu1~24.04.1
- 10.0.105-10.0.5-0ubuntu1~24.04.1
- Affected ranges
- ECOSYSTEM: < 10.0.106-10.0.6-0ubuntu1~24.04.1
Update to 10.0.106-10.0.6-0ubuntu1~24.04.1
dotnet8 Ubuntu:24.04:LTS
- Versions
- 8.0.100-8.0.0~rc1-0ubuntu1
- 8.0.100-8.0.0~rc2-0ubuntu1
- 8.0.100-8.0.0~rc2-0ubuntu2
- 8.0.100-8.0.0-0ubuntu1
- 8.0.100-8.0.0-0ubuntu2
- 8.0.101-8.0.1-0ubuntu1
- 8.0.101-8.0.1-0ubuntu2
- 8.0.102-8.0.2-0ubuntu1
- 8.0.103-8.0.3-0ubuntu2
- 8.0.103-8.0.3-0ubuntu3
- 8.0.104-8.0.4-0ubuntu1
- 8.0.105-8.0.5-0ubuntu1~24.04.1
- 8.0.107-8.0.7-0ubuntu1~24.04.1
- 8.0.108-8.0.8-0ubuntu1~24.04.1
- 8.0.108-8.0.8-0ubuntu1~24.04.2
- 8.0.110-8.0.10-0ubuntu1~24.04.1
- 8.0.111-8.0.11-0ubuntu1~24.04.1
- 8.0.112-8.0.12-0ubuntu1~24.04.1
- 8.0.114-8.0.14-0ubuntu1~24.04.1
- 8.0.115-8.0.15-0ubuntu1~24.04.1
- 8.0.116-8.0.16-0ubuntu1~24.04.1
- 8.0.117-8.0.17-0ubuntu1~24.04.1
- 8.0.118-8.0.18-0ubuntu1~24.04.1
- 8.0.119-8.0.19-0ubuntu1~24.04.1
- 8.0.120-8.0.20-0ubuntu1~24.04.1
- 8.0.121-8.0.21-0ubuntu1~24.04.1
- 8.0.122-8.0.22-0ubuntu1~24.04.1
- 8.0.123-8.0.23-0ubuntu1~24.04.1
- 8.0.124-8.0.24-0ubuntu1~24.04.1
- 8.0.125-8.0.25-0ubuntu1~24.04.1
- Affected ranges
- ECOSYSTEM: < 8.0.126-8.0.26-0ubuntu1~24.04.1
Update to 8.0.126-8.0.26-0ubuntu1~24.04.1
dotnet10 Ubuntu:25.10
- Versions
- 10.0.100-10.0.0~rc1-0ubuntu1
- 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2
- 10.0.100-10.0.0-0ubuntu1~25.10.1
- 10.0.101-10.0.1-0ubuntu1~25.10.2
- 10.0.103-10.0.3-0ubuntu1~25.10.1
- 10.0.104-10.0.4-0ubuntu1~25.10.1
- 10.0.105-10.0.5-0ubuntu1~25.10.1
- Affected ranges
- ECOSYSTEM: < 10.0.106-10.0.6-0ubuntu1~25.10.1
Update to 10.0.106-10.0.6-0ubuntu1~25.10.1
dotnet8 Ubuntu:25.10
- Versions
- 8.0.115-8.0.15-0ubuntu1
- 8.0.116-8.0.16-0ubuntu1
- 8.0.117-8.0.17-0ubuntu1
- 8.0.118-8.0.18-0ubuntu1
- 8.0.119-8.0.19-0ubuntu1
- 8.0.120-8.0.20-0ubuntu1
- 8.0.121-8.0.21-0ubuntu1~25.10.1
- 8.0.122-8.0.22-0ubuntu1~25.10.1
- 8.0.123-8.0.23-0ubuntu1~25.10.1
- 8.0.124-8.0.24-0ubuntu1~25.10.1
- 8.0.125-8.0.25-0ubuntu1~25.10.1
- Affected ranges
- ECOSYSTEM: < 8.0.126-8.0.26-0ubuntu1~25.10.1
Update to 8.0.126-8.0.26-0ubuntu1~25.10.1
dotnet9 Ubuntu:25.10
- Versions
- 9.0.105-9.0.4-0ubuntu1
- 9.0.106-9.0.5-0ubuntu1
- 9.0.107-9.0.6-0ubuntu1
- 9.0.108-9.0.7-0ubuntu1
- 9.0.109-9.0.8-0ubuntu1
- 9.0.110-9.0.9-0ubuntu1
- 9.0.111-9.0.10-0ubuntu1~25.10.1
- 9.0.112-9.0.11-0ubuntu1~25.10.1
- 9.0.113-9.0.12-0ubuntu1~25.10.1
- 9.0.114-9.0.13-0ubuntu1~25.10.1
- 9.0.115-9.0.14-0ubuntu1~25.10.1
- Affected ranges
- ECOSYSTEM: < 9.0.116-9.0.15-0ubuntu1~25.10.1
Update to 9.0.116-9.0.15-0ubuntu1~25.10.1
dotnet10 Ubuntu:26.10
- Versions
- 10.0.105-10.0.5-0ubuntu1
- Affected ranges
- ECOSYSTEM: < 10.0.107-10.0.7-0ubuntu1~26.04.1
Update to 10.0.107-10.0.7-0ubuntu1~26.04.1
dotnet10 Ubuntu:26.04:LTS
- Versions
- 10.0.100-10.0.0~rc1-0ubuntu1
- 10.0.100-10.0.0~rc2-0ubuntu1
- 10.0.100-10.0.0-0ubuntu1
- 10.0.100-10.0.0-0ubuntu2
- 10.0.101-10.0.1-0ubuntu1
- 10.0.101-10.0.1-0ubuntu2
- 10.0.101-10.0.1-0ubuntu3
- 10.0.102-10.0.2-0ubuntu1
- 10.0.103-10.0.3-0ubuntu1
- 10.0.104-10.0.4-0ubuntu1
- 10.0.105-10.0.5-0ubuntu1
- Affected ranges
- ECOSYSTEM: < 10.0.107-10.0.7-0ubuntu1~26.04.1
Update to 10.0.107-10.0.7-0ubuntu1~26.04.1
Original sources
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116
- https://access.redhat.com/security/cve/CVE-2026-33116
- https://bugzilla.redhat.com/show_bug.cgi?id=2457741
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json
- https://access.redhat.com/errata/RHSA-2026:13281
- https://access.redhat.com/errata/RHSA-2026:13280
- https://access.redhat.com/errata/RHSA-2026:8467
- https://access.redhat.com/errata/RHSA-2026:8470
- https://access.redhat.com/errata/RHSA-2026:8472
- https://access.redhat.com/errata/RHSA-2026:8473
- https://access.redhat.com/errata/RHSA-2026:8468
- https://access.redhat.com/errata/RHSA-2026:8475
- https://access.redhat.com/errata/RHSA-2026:13693
- https://access.redhat.com/errata/RHSA-2026:13283
- https://access.redhat.com/errata/RHSA-2026:13282
- https://access.redhat.com/errata/RHSA-2026:8471
- https://access.redhat.com/errata/RHSA-2026:8469
- https://access.redhat.com/errata/RHSA-2026:8474
- https://access.redhat.com/errata/RHSA-2026:9077
- https://access.redhat.com/errata/RHSA-2026:9080
- https://access.redhat.com/errata/RHSA-2026:9205
- https://nvd.nist.gov/vuln/detail/CVE-2026-33116