.NET and Microsoft Visual Studio Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in .NET and Microsoft Visual Studio. This issue arises from the unrestricted allocation of resources, which can be exploited by an unauthorized attacker to disrupt service over a network. The vulnerability affects .NET 8.0, 9.0, and 10.0, as well as Microsoft Visual Studio 2022 and 2026, across various operating systems including Windows, Linux, and Mac OS.

Impact

Exploitation of this vulnerability leads to a significant denial-of-service condition, causing a high impact on availability by disrupting normal service operations.

Remediation

Users can download the security update for this vulnerability through the Microsoft Visual Studio Update Manager or the .NET download page. For Visual Studio 2022, the update is available for versions 17.12 and 17.14. For Visual Studio 2026, the update is available for version 18.7. .NET users can download the update for versions 8.0, 9.0, and 10.0 from the official .NET download site.