Stack-based Buffer Overflow in .NET and Visual Studio by Microsoft
CVE-2026-32203

7.5HIGH

What is CVE-2026-32203?

A stack-based buffer overflow vulnerability has been identified in .NET and Visual Studio, allowing an unauthorized attacker to potentially cause a denial of service over a network. This occurs when the application fails to adequately validate input data, leading to the possibility of excessive memory usage and instability. Users are advised to apply the necessary patches to mitigate the risk and secure their applications from potential exploitation.

Affected Version(s)

.NET 10.0 10.0.0 < 10.0.6

.NET 8.0 8.0.0 < 8.0.26

.NET 9.0 9.0.0 < 9.0.15

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.