Oct 2026: .NET Denial of Service Vulnerability
CVE-2026-58280 Published on October 13, 2026

.NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

YES

Technical Impact:

PARTIAL

Weakness Type

What is a Stack Exhaustion Vulnerability?

The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.

CVE-2026-58280 has been classified to as a Stack Exhaustion vulnerability or weakness.

Products Associated with CVE-2026-58280

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Net

  Watch

Microsoft .NET Framework

  Watch

Microsoft Visual Studio 2026 Version 18 10

  Watch

Microsoft Visual Studio 2022

  Watch

Affected Versions

• Version 10.0.0 and below 10.0.13 is affected.

• Version 11.0.0 and below 11.0.0-rc.2 is affected.

• Version 8.0.0 and below 8.0.32 is affected.

• Version 9.0.0 and below 9.0.21 is affected.

• Version 3.5.0 and below 2.0.50727.9188 AND 3.0.30729.9171 is affected.

• Version 3.0.0.0 and below 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 is affected.

• Version 4.7.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 is affected.

• Version 4.8.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 is affected.

• Version 4.8.1 and below 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 is affected.

• Version 4.7.0 and below 4.7.4150.0 is affected.

• Version 4.8.0 and below 4.8.4811.0 is affected.

• Version 4.8.0.0 and below 4.8.9363.0 is affected.

• Version 17.14.0 and below 17.14.42 is affected.

• Version 18.10.0 and below 18.10.4 is affected.