CVE-2026-45591

Automatable: yes
Technical Impact: partial

Tuesday, June 09, 2026

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Summary

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Vendor	Product	Version Range	Status
Microsoft	.NET 10.0	`10.0.0 < 10.0.9`	affected
Microsoft	.NET 8.0	`8.0.0 < 8.0.28`	affected
Microsoft	.NET 9.0	`9.0.0 < 9.0.17`	affected
Microsoft	ASP.NET Core 10.0	`10.0 < 10.0.9`	affected
Microsoft	ASP.NET Core 8.0	`8.0 < 8.0.28`	affected
Microsoft	ASP.NET Core 9.0	`9.0 < 9.0.17`	affected
Microsoft	Microsoft Visual Studio 2026 version 18.6	`18.6.0 < 18.6.3`	affected

Was this page helpful?

Sorry to hear that. Please tell us how we can improve.