Buffer Overflow in.NET EncryptedXml Class: Denial of Service Risk
An early warning has been issued regarding a buffer overflow vulnerability in the EncryptedXml class of System.Security.Cryptography.Xml, which reportedly allows for Denial of Service attacks. This appears to affect Microsoft.NET projects using specific versions of the package.
What happened
According to the Microsoft Security Advisory CVE-2026-32203, a buffer overflow vulnerability has been identified in the EncryptedXml class within the System.Security.Cryptography.Xml package. This vulnerability is under investigation and is reported to enable Denial of Service (DoS) attacks. The affected versions include System.Security.Cryptography.Xml (nuget) >=10.0.0,<=10.0.5, >=9.0.0,<=9.0.14, and >=8.0.0,<=8.0.2.
To assess your exposure, review your.NET projects for usage of the affected versions of the System.Security.Cryptography.Xml package. If your projects are utilizing any of the vulnerable versions, it is recommended to upgrade to the patched versions: 10.0.6 for.NET 10, 9.0.15 for.NET 9, and 8.0.3 for .NET 8.
For more detailed information and to stay updated on this vulnerability, consult the primary sources provided. The situation is still under investigation, and further details may become available as the analysis progresses.
How 0Day mitigates this
System.Security.Cryptography.Xml is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.