ASP.NET Core Denial of Service Vulnerability in Microsoft Products
CVE-2026-45591

7.5HIGH

Key Information:

Vendor

Microsoft
Status
.net 10.0
.net 8.0
.net 9.0
Asp.net Core 10.0
Vendor
CVE Published:
9 June 2026

What is CVE-2026-45591?

An uncontrolled resource consumption vulnerability in ASP.NET Core allows unauthorized users to exploit the system, potentially leading to Denial of Service (DoS) by consuming excessive resources over the network. This issue may disrupt the normal operations of affected applications, making it crucial for users to be aware and implement necessary security measures or patches to mitigate risks.

Affected Version(s)

.NET 10.0 10.0.0 < 10.0.9

.NET 8.0 8.0.0 < 8.0.28

.NET 9.0 9.0.0 < 9.0.17

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.