Skip to main content
No exploitation reportedFix available

CVE-2026-50527

.NET Framework Denial of Service Vulnerability

No exploitation reported by the sources we read.

  • Published2026-07-14
  • WeaknessCWE-121

Am I affected?

With a domain, we read the version its public headers and pages expose. A distribution build can carry the fix under an older number.

Description

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Timeline

dates in UTC
  1. 2026-07-1419:29CVE publishedCNA

Versions per branch

NVD · OSV
Microsoft .net frameworkversion to verify
BranchAffectedFixed in
4.8= 4.8no fix published
4.6= 4.6.2no fix published
4.7= 4.7no fix published
4.7= 4.7.1no fix published
4.7= 4.7.2no fix published
3.5= 3.5no fix published
4.8= 4.8.1no fix published
Microsoft .netversion to verify
BranchAffectedFixed in
10.0≥ 10.0.0, < 10.0.1010.0.10
10.0≥ 10.0.0, < 10.0.610.0.6
9.0≥ 9.0.0, < 9.0.189.0.18
8.0≥ 8.0.0, < 8.0.298.0.29
8.0≥ 8.0.0, < 8.0.48.0.4
Microsoft visual studio 2022
BranchAffectedFixed in
17.14≥ 17.14.0, < 17.14.3617.14.36
17.12≥ 17.12.0, < 17.12.2217.12.22

1 more product in the sources.

as publishedRanges as NVD and OSV publish them; a distribution’s build can be fixed under an older number.

Products declared by the CNA12 products

As microsoft, the CNA that assigned this CVE, declared them in the CVE record; versions as written.

  • Microsoft .NET 10.0 runtime
    Affected
    • ≥ 10.0.0, < 10.0.10fixed in 10.0.10custom
  • Microsoft .NET 8.0 runtime
    Affected
    • ≥ 8.0.0, < 8.0.29fixed in 8.0.29custom
  • Microsoft .NET 9.0 runtime
    Affected
    • ≥ 9.0.0, < 9.0.18fixed in 9.0.18custom
  • Microsoft .NET Framework 3.5

    platforms: Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

    Affected
    • ≥ 3.5.0, < 2.0.50727.8983 & 3.0.30729.8978fixed in 2.0.50727.8983 & 3.0.30729.8978custom
  • Microsoft .NET Framework 3.5 AND 4.7.2

    platforms: Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

    Affected
    • ≥ 4.7.0, < 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0custom
  • Microsoft .NET Framework 3.5 AND 4.8

    platforms: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

    Affected
    • ≥ 4.8.0, < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0custom

6 more products in the CVE record.

Source: the CNA record (CVE Program), © The MITRE Corporation,CVE Terms of UseCVE recordupdated 2026-10-28

Distribution builds and vendor advisories

Packages from OSV.dev and products from the vendors' CSAF advisories.

version not verifiedVersions not verified: read as OSV.dev and the vendors publish them, not checked against each vendor's release list.

Packages

  • azure-functions-hostMinimOSall versions · fixed in 4.1054.100-r0
  • dotnetRed Hat:enterprise_linux:8::appstreamall versions · fixed in 0:10.0.110-1.el8_10and 9 other packages
  • dotnetAlmaLinux:8all versions · fixed in 10.0.110-1.el8_10and 5 other packages
  • dotnet-10-sdkMinimOSall versions · fixed in 10.0.110-r0
  • dotnet-8MinimOSall versions · fixed in 8.0.119-r0and 7 other packages
  • dotnet-8-sdkMinimOSall versions · fixed in 8.0.129-r0
  • dotnet-9MinimOSall versions · fixed in 9.0.109-r0and 8 other packages
  • dotnet-9-sdkMinimOSall versions · fixed in 9.0.119-r0

106 more package ranges on OSV.dev

Vendor advisories

  • CVE-2026-50527 Red Hat Product Security1,467 products fixed

    dotnet: .NET Framework: Denial of Service via network-based buffer overflow

  • RHSA-2026:58570 Red Hat Product Security119 products fixed

    Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

  • RHSA-2026:58569 Red Hat Product Security97 products fixed

    Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

  • RHSA-2026:58568 Red Hat Product Security81 products fixed

    Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

  • RHSA-2026:58567 Red Hat Product Security111 products fixed

    Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

  • RHSA-2026:58566 Red Hat Product Security89 products fixed

    Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

12 more advisories

Full record on NVD

Fix

  1. Vendor fix Red Hat Product Security RHSA-2026:58570 · 119 productsFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
  2. Vendor fix Red Hat Product Security RHSA-2026:42145 · 9 productsFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

Advisories and patches

Detection

Nuclei template
none so far
ProjectDiscovery
Exploit-DB
no entry
Exploit-DB
Proof of concept
Metasploit modules
none listed
Metasploit Framework

Sources

Identifiers

Technical details

CVSS v3 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
2026-07-14
Last Modified
2026-10-28
NVD status
Analyzed
GitHub Advisory
GHSA-mmjf-rqrv-855v

Frequently asked questions

What is CVE-2026-50527?

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Is CVE-2026-50527 actively exploited?

Active exploitation of CVE-2026-50527 has not been confirmed. Its EPSS score was 1.2% on 2026-11-12, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-50527?

CVE-2026-50527 has a CVSS v3 base score of 7.5 (HIGH severity), with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Running dotnet? Hear about its next vulnerability

Surveillance reads the versions in your stack — a domain, a lockfile or a list — checks each CVE against the ranges its sources publish, and alerts you when one you run is exploited or enters CISA KEV. A version it cannot read stays « version not verified ».

Get alerts for this productCISA KEV additions, November 2026Search CVEs

No credit card required · No monthly cap on website lookups · 250 API requests/month

Go further

Related vulnerabilities

Same product first, then the same vendor advisory and the same publication week.

Back to CVE Database

Sources for this record