Apr 2026: .NET Framework Denial of Service Vulnerability
CVE-2026-23666 Published on April 14, 2026

.NET Framework Denial of Service Vulnerability
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

Vendor Advisory NVD

Weakness Type

Improper Handling of Exceptional Conditions

The software does not handle or incorrectly handles an exceptional condition.

Products Associated with CVE-2026-23666

Want to know whenever a new CVE is published for Microsoft Net? stack.watch will email you.

Microsoft Net

Affected Versions

Microsoft .NET Framework 3.5:

Version 3.5.0 and below 2.0.50727.8982 & 3.0.30729.8976 is affected.

Microsoft .NET Framework 3.5 AND 4.7.2:

Version 4.7.0 and below 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 is affected.

Microsoft .NET Framework 3.5 AND 4.8:

Version 4.8.0 and below 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0 is affected.

Microsoft .NET Framework 3.5 AND 4.8.1:

Version 4.8.1 and below 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 is affected.

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2:

Version 4.7.0 and below 4.8.4801.0 is affected.

Microsoft .NET Framework 4.8:

Version 4.8.0 and below 4.8.4801.0 is affected.

Exploit Probability

EPSS

0.12%

Percentile

30.05%