Out-of-Bounds Read Vulnerability in .NET by Microsoft
CVE-2026-26127

7.5HIGH

Key Information:

Vendor

Microsoft
Status
.net 10.0
.net 9.0
Microsoft.bcl.memory
Vendor
CVE Published:
10 March 2026

What is CVE-2026-26127?

An out-of-bounds read vulnerability in Microsoft's .NET framework can allow unauthorized attackers to exploit the system, potentially leading to denial of service over a network. Attackers may leverage this flaw to disrupt service, compromising the availability of applications and services that rely on .NET. It is crucial for users and administrators to apply the necessary patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

.NET 10.0 10.0.0 < 10.0.4

.NET 9.0 9.0.0 < 9.0.14

Microsoft.Bcl.Memory 10.0.0 < 10.0.4

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.