.NET Denial of Service Vulnerability: Assess Your Exposure Now
EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
- Severity
- HIGH
- CVSS
- 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
- Affected component
- Microsoft.NETCore.App.Runtime.win-arm64 (nuget)
- Affected versions
- >= 7.0.0, < 7.0.11 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.10, <= 7.0.10 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 7.0.9, <= 7.0.9 or >= 6.0.0, < 6.0.22 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.18, <= 6.0.18 or >= 6.0.19, <= 6.0.19 or >= 6.0.2, <= 6.0.2 or >= 6.0.20, <= 6.0.20 or >= 6.0.21, <= 6.0.21 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 3.1.0, < 3.1.12 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.10, <= 3.1.10 or >= 3.1.11, <= 3.1.11 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.1.5, <= 3.1.5 or >= 3.1.6, <= 3.1.6 or >= 3.1.7, <= 3.1.7 or >= 3.1.8, <= 3.1.8 or >= 3.1.9, <= 3.1.9 or >= 5.0.0, < 5.0.3 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.2, <= 5.0.2 or >= 7.0.0, < 7.0.11 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.10, <= 7.0.10 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 7.0.9, <= 7.0.9 or >= 6.0.0, < 6.0.22 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.18, <= 6.0.18 or >= 6.0.19, <= 6.0.19 or >= 6.0.2, <= 6.0.2 or >= 6.0.20, <= 6.0.20 or >= 6.0.21, <= 6.0.21 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 3.1.0, < 3.1.4 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 6.0.0, < 6.0.18 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.2, <= 6.0.2 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 7.0.0, < 7.0.7 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.0-preview.1.22076.8, < 7.0.17 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.10, <= 7.0.10 or >= 7.0.11, <= 7.0.11 or >= 7.0.12, <= 7.0.12 or >= 7.0.13, <= 7.0.13 or >= 7.0.14, <= 7.0.14 or >= 7.0.15, <= 7.0.15 or >= 7.0.16, <= 7.0.16 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 7.0.9, <= 7.0.9 or >= 8.0.0, < 8.0.3 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.2, <= 8.0.2 or >= 3.0.0, < 3.1.23 or >= 3.0.0, <= 3.0.0 or >= 3.0.1, <= 3.0.1 or >= 3.0.2, <= 3.0.2 or >= 3.0.3, <= 3.0.3 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.10, <= 3.1.10 or >= 3.1.11, <= 3.1.11 or >= 3.1.12, <= 3.1.12 or >= 3.1.13, <= 3.1.13 or >= 3.1.14, <= 3.1.14 or >= 3.1.15, <= 3.1.15 or >= 3.1.16, <= 3.1.16 or >= 3.1.17, <= 3.1.17 or >= 3.1.18, <= 3.1.18 or >= 3.1.19, <= 3.1.19 or >= 3.1.2, <= 3.1.2 or >= 3.1.20, <= 3.1.20 or >= 3.1.21, <= 3.1.21 or >= 3.1.22, <= 3.1.22 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.1.5, <= 3.1.5 or >= 3.1.6, <= 3.1.6 or >= 3.1.7, <= 3.1.7 or >= 3.1.8, <= 3.1.8 or >= 3.1.9, <= 3.1.9 or >= 5.0.0, < 5.0.15 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.10, <= 5.0.10 or >= 5.0.11, <= 5.0.11 or >= 5.0.12, <= 5.0.12 or >= 5.0.13, <= 5.0.13 or >= 5.0.14, <= 5.0.14 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.0.6, <= 5.0.6 or >= 5.0.7, <= 5.0.7 or >= 5.0.8, <= 5.0.8 or >= 5.0.9, <= 5.0.9 or >= 6.0.0, < 6.0.3 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.2, <= 6.0.2 or >= 7.0.0, < 7.0.19 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.10, <= 7.0.10 or >= 7.0.11, <= 7.0.11 or >= 7.0.12, <= 7.0.12 or >= 7.0.13, <= 7.0.13 or >= 7.0.14, <= 7.0.14 or >= 7.0.15, <= 7.0.15 or >= 7.0.16, <= 7.0.16 or >= 7.0.17, <= 7.0.17 or >= 7.0.18, <= 7.0.18 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 7.0.9, <= 7.0.9 or >= 8.0.0, < 8.0.5 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.2, <= 8.0.2 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 6.0.0, < 6.0.13 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.2, <= 6.0.2 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 10.0.0, < 10.0.11 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.10, <= 10.0.10 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.19 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.18, <= 9.0.18 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.30 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.29, <= 8.0.29 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 3.0.0, < 3.1.23 or >= 3.0.0, <= 3.0.0 or >= 3.0.1, <= 3.0.1 or >= 3.0.2, <= 3.0.2 or >= 3.0.3, <= 3.0.3 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.10, <= 3.1.10 or >= 3.1.11, <= 3.1.11 or >= 3.1.12, <= 3.1.12 or >= 3.1.13, <= 3.1.13 or >= 3.1.14, <= 3.1.14 or >= 3.1.15, <= 3.1.15 or >= 3.1.16, <= 3.1.16 or >= 3.1.17, <= 3.1.17 or >= 3.1.18, <= 3.1.18 or >= 3.1.19, <= 3.1.19 or >= 3.1.2, <= 3.1.2 or >= 3.1.20, <= 3.1.20 or >= 3.1.21, <= 3.1.21 or >= 3.1.22, <= 3.1.22 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.1.5, <= 3.1.5 or >= 3.1.6, <= 3.1.6 or >= 3.1.7, <= 3.1.7 or >= 3.1.8, <= 3.1.8 or >= 3.1.9, <= 3.1.9 or >= 5.0.0, < 5.0.15 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.10, <= 5.0.10 or >= 5.0.11, <= 5.0.11 or >= 5.0.12, <= 5.0.12 or >= 5.0.13, <= 5.0.13 or >= 5.0.14, <= 5.0.14 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.0.6, <= 5.0.6 or >= 5.0.7, <= 5.0.7 or >= 5.0.8, <= 5.0.8 or >= 5.0.9, <= 5.0.9 or >= 6.0.0, < 6.0.3 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.2, <= 6.0.2 or >= 7.0.0, < 7.0.11 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.10, <= 7.0.10 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 7.0.9, <= 7.0.9 or >= 6.0.0, < 6.0.22 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.18, <= 6.0.18 or >= 6.0.19, <= 6.0.19 or >= 6.0.2, <= 6.0.2 or >= 6.0.20, <= 6.0.20 or >= 6.0.21, <= 6.0.21 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 3.1.0, < 3.1.6 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.1.5, <= 3.1.5 or >= 7.0.0, < 7.0.11 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.10, <= 7.0.10 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 7.0.7, <= 7.0.7 or >= 7.0.8, <= 7.0.8 or >= 7.0.9, <= 7.0.9 or >= 6.0.0, < 6.0.22 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.18, <= 6.0.18 or >= 6.0.19, <= 6.0.19 or >= 6.0.2, <= 6.0.2 or >= 6.0.20, <= 6.0.20 or >= 6.0.21, <= 6.0.21 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 7.0.0, < 7.0.7 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5 or >= 6.0.0, < 6.0.18 or >= 6.0.0, <= 6.0.0 or >= 6.0.1, <= 6.0.1 or >= 6.0.10, <= 6.0.10 or >= 6.0.11, <= 6.0.11 or >= 6.0.12, <= 6.0.12 or >= 6.0.13, <= 6.0.13 or >= 6.0.14, <= 6.0.14 or >= 6.0.15, <= 6.0.15 or >= 6.0.16, <= 6.0.16 or >= 6.0.2, <= 6.0.2 or >= 6.0.3, <= 6.0.3 or >= 6.0.4, <= 6.0.4 or >= 6.0.5, <= 6.0.5 or >= 6.0.6, <= 6.0.6 or >= 6.0.7, <= 6.0.7 or >= 6.0.8, <= 6.0.8 or >= 6.0.9, <= 6.0.9 or >= 10.0.0, < 10.0.11 or >= 10.0.0, <= 10.0.0 or >= 10.0.1, <= 10.0.1 or >= 10.0.10, <= 10.0.10 or >= 10.0.2, <= 10.0.2 or >= 10.0.3, <= 10.0.3 or >= 10.0.4, <= 10.0.4 or >= 10.0.5, <= 10.0.5 or >= 10.0.6, <= 10.0.6 or >= 10.0.7, <= 10.0.7 or >= 10.0.8, <= 10.0.8 or >= 10.0.9, <= 10.0.9 or >= 9.0.0, < 9.0.19 or >= 9.0.0, <= 9.0.0 or >= 9.0.1, <= 9.0.1 or >= 9.0.10, <= 9.0.10 or >= 9.0.11, <= 9.0.11 or >= 9.0.12, <= 9.0.12 or >= 9.0.13, <= 9.0.13 or >= 9.0.14, <= 9.0.14 or >= 9.0.15, <= 9.0.15 or >= 9.0.16, <= 9.0.16 or >= 9.0.17, <= 9.0.17 or >= 9.0.18, <= 9.0.18 or >= 9.0.2, <= 9.0.2 or >= 9.0.3, <= 9.0.3 or >= 9.0.4, <= 9.0.4 or >= 9.0.5, <= 9.0.5 or >= 9.0.6, <= 9.0.6 or >= 9.0.7, <= 9.0.7 or >= 9.0.8, <= 9.0.8 or >= 9.0.9, <= 9.0.9 or >= 8.0.0, < 8.0.30 or >= 8.0.0, <= 8.0.0 or >= 8.0.1, <= 8.0.1 or >= 8.0.10, <= 8.0.10 or >= 8.0.11, <= 8.0.11 or >= 8.0.12, <= 8.0.12 or >= 8.0.13, <= 8.0.13 or >= 8.0.14, <= 8.0.14 or >= 8.0.15, <= 8.0.15 or >= 8.0.16, <= 8.0.16 or >= 8.0.17, <= 8.0.17 or >= 8.0.18, <= 8.0.18 or >= 8.0.19, <= 8.0.19 or >= 8.0.2, <= 8.0.2 or >= 8.0.20, <= 8.0.20 or >= 8.0.21, <= 8.0.21 or >= 8.0.22, <= 8.0.22 or >= 8.0.23, <= 8.0.23 or >= 8.0.24, <= 8.0.24 or >= 8.0.25, <= 8.0.25 or >= 8.0.26, <= 8.0.26 or >= 8.0.27, <= 8.0.27 or >= 8.0.28, <= 8.0.28 or >= 8.0.29, <= 8.0.29 or >= 8.0.3, <= 8.0.3 or >= 8.0.4, <= 8.0.4 or >= 8.0.5, <= 8.0.5 or >= 8.0.6, <= 8.0.6 or >= 8.0.7, <= 8.0.7 or >= 8.0.8, <= 8.0.8 or >= 3.1.0, < 3.1.18 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.10, <= 3.1.10 or >= 3.1.11, <= 3.1.11 or >= 3.1.12, <= 3.1.12 or >= 3.1.13, <= 3.1.13 or >= 3.1.14, <= 3.1.14 or >= 3.1.15, <= 3.1.15 or >= 3.1.16, <= 3.1.16 or >= 3.1.17, <= 3.1.17 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.1.5, <= 3.1.5 or >= 3.1.6, <= 3.1.6 or >= 3.1.7, <= 3.1.7 or >= 3.1.8, <= 3.1.8 or >= 3.1.9, <= 3.1.9 or >= 5.0.0, < 5.0.9 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.0.6, <= 5.0.6 or >= 5.0.7, <= 5.0.7 or >= 5.0.8, <= 5.0.8 or >= 3.1.0, < 3.1.18 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.10, <= 3.1.10 or >= 3.1.11, <= 3.1.11 or >= 3.1.12, <= 3.1.12 or >= 3.1.13, <= 3.1.13 or >= 3.1.14, <= 3.1.14 or >= 3.1.15, <= 3.1.15 or >= 3.1.16, <= 3.1.16 or >= 3.1.17, <= 3.1.17 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.1.5, <= 3.1.5 or >= 3.1.6, <= 3.1.6 or >= 3.1.7, <= 3.1.7 or >= 3.1.8, <= 3.1.8 or >= 3.1.9, <= 3.1.9 or >= 5.0.0, < 5.0.9 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.0.6, <= 5.0.6 or >= 5.0.7, <= 5.0.7 or >= 5.0.8, <= 5.0.8 or >= 7.0.0, < 7.0.7 or >= 7.0.0, <= 7.0.0 or >= 7.0.1, <= 7.0.1 or >= 7.0.2, <= 7.0.2 or >= 7.0.3, <= 7.0.3 or >= 7.0.4, <= 7.0.4 or >= 7.0.5, <= 7.0.5
- Patched version
- 10.0.11
CVE-2026-62901GHSA-M93F-WJ8C-RP8P
An unchecked input for loop condition in.NET may allow an unauthorized attacker to deny service over a network. Microsoft.NET projects using affected package versions are reportedly at risk.
What happened
The vulnerability, tracked as CVE-2026-62901 and GHSA-M93F-WJ8C-RP8P, was first flagged on 2026-08-11. It affects multiple Microsoft.NETCore.App.Runtime packages across various platforms and versions. The issue stems from an unchecked input for a loop condition, which could be exploited to cause a denial of service over a network.
Affected platforms include win-arm64, win-x64, win-x86, linux-arm, linux-arm64, and linux-musl-arm. Specific version ranges for each platform are detailed in the threat data. This vulnerability has not yet been exploited in the wild, according to the primary sources.
What to do about it
- Review the version ranges of your Microsoft.NETCore.App.Runtime packages to determine if you are using an affected version.
- If you are using an affected version, upgrade to the patched version 10.0.11 where available.
- Monitor the Microsoft Security Advisory and GitHub Security Advisory for updates on additional patched versions and further details.
- Implement network-level protections to mitigate potential denial of service attacks while awaiting official patches.
How 0Day would have caught this
MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If
Microsoft.NETCore.App.Runtime.win-arm64 is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
Check if your Microsoft.NETCore.App.Runtime packages fall within the affected version ranges listed in the threat data.
What should I do right now?
Review your package versions and upgrade to the patched version 10.0.11 where possible. Monitor the advisories for updates.
Is this vulnerability being actively exploited?
According to the primary sources, this vulnerability has not yet been exploited in the wild.
Where can I find more information?
Consult the Microsoft Security Advisory and GitHub Security Advisory for the latest information and updates.