Oct 2026: .NET Denial of Service Vulnerability
CVE-2026-70162 Published on October 13, 2026
.NET Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.
The update addresses the vulnerability by correcting how the .NET web application handles web requests.
Weakness Type
What is an Amplification Vulnerability?
Software that does not appropriately monitor or control resource consumption can lead to adverse system performance. This situation is amplified if the software allows malicious users or attackers to consume more resources than their access level permits. Exploiting such a weakness can lead to asymmetric resource consumption, aiding in amplification attacks against the system or the network.
CVE-2026-70162 has been classified to as an Amplification vulnerability or weakness.
Products Associated with CVE-2026-70162
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft Visual Studio 2022 version 17.14:- Version 17.14.0 and below 17.14.42 is affected.
- Version 18.10.0 and below 18.10.4 is affected.
- Version 10.0.0 and below 10.0.13 is affected.