CVE-2022-26832
published 2022-04-15CVE-2022-26832: .NET Framework Denial of Service Vulnerability .NET Framework Denial of Service Vulnerability
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
3.28%
87.1th percentile
.NET Framework Denial of Service Vulnerability
.NET Framework Denial of Service Vulnerability
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft_net_framework_2.0_service_pack_2 | >= 2.0.0 < 2.0.50727.8962 | 2.0.50727.8962 |
| microsoft | microsoft_net_framework_3.0_service_pack_2 | >= 3.0.0 < 2.0.50727.8962 | 2.0.50727.8962 |
| microsoft | microsoft_net_framework_3.5 | >= 3.5.0 < publication | publication |
| microsoft | microsoft_net_framework_3.5.1 | >= 3.5.0 < 6.1.50727.8962 | 6.1.50727.8962 |
| microsoft | microsoft_net_framework_3.5_and_4.6.2_4.7_4.7.1_4.7.2 | >= 3.0.0.0 < 10.0.14393.5066 | 10.0.14393.5066 |
| microsoft | microsoft_net_framework_3.5_and_4.7.2 | >= 4.7.0 < 4.7.3930.02 | 4.7.3930.02 |
| microsoft | microsoft_net_framework_3.5_and_4.8 | >= 4.8.0 < 4.8.4494.03 | 4.8.4494.03 |
| microsoft | microsoft_net_framework_4.5.2 | >= 4.0.0.0 < 4.0.52732.36732 | 4.0.52732.36732 |
| microsoft | microsoft_net_framework_4.6 | >= 4.0.0.0 < 4.0.52732.36732 | 4.0.52732.36732 |
| microsoft | microsoft_net_framework_4.6_4.6.1_4.6.2_4.7_4.7.1_4.7.2 | >= 4.0.0.0 < 4.7.03930.02 | 4.7.03930.02 |
| microsoft | microsoft_net_framework_4.8 | >= 4.8.0 < 4.8.04494.03 | 4.8.04494.03 |
| msrc | microsoft_net_framework_2.0_service_pack_2 | — | — |
| msrc | microsoft_net_framework_3.0_service_pack_2 | — | — |
| msrc | microsoft_net_framework_3.5 | — | — |
| msrc | microsoft_net_framework_3.5.1 | — | — |
| msrc | microsoft_net_framework_3.5_and_4.6.2_4.7_4.7.1_4.7.2 | — | — |
| msrc | microsoft_net_framework_3.5_and_4.7.2 | — | — |
| msrc | microsoft_net_framework_3.5_and_4.8 | — | — |
| msrc | microsoft_net_framework_4.5.2 | — | — |
| msrc | microsoft_net_framework_4.6 | — | — |
| msrc | microsoft_net_framework_4.6_4.6.1_4.6.2_4.7_4.7.1_4.7.2 | — | — |
| msrc | microsoft_net_framework_4.8 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
cvelistv57.5HIGH
vendor_msrc7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
dotnet: Denial of service vulnerability
vendor_redhat·2022-04-15·CVSS 7.5
CVE-2022-26832 [HIGH] CWE-400 dotnet: Denial of service vulnerability
dotnet: Denial of service vulnerability
.NET Framework Denial of Service Vulnerability
Package: rh-dotnet60-dotnet (.NET 6.0 on Red Hat Enterprise Linux) - Not affected
Package: rh-dotnet31-dotnet (.NET Core 3.1 on Red Hat Enterprise Linux) - Not affected
Package: rh-dotnet50-dotnet (.NET Core 5.0 on Red Hat Enterprise Linux) - Not affected
Package: dotnet3.1 (Red Hat Enterprise Linux 8) - Not affected
Package: dotnet5.0 (Red Hat Enterprise Linux 8) - Not affected
Package: dotnet6.0 (Red Hat Enterprise Linux 8) - Not affected
Package: dotnet3.1 (Red Hat Enterprise Linux 9) - Not affected
Microsoft
.NET Framework Denial of Service Vulnerability
vendor_msrc·2022-04-12·CVSS 7.5
CVE-2022-26832 [HIGH] .NET Framework Denial of Service Vulnerability
.NET Framework Denial of Service Vulnerability
.NET Framework: .NET Framework
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Denial of Service
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012120
Reference: https://support.microsoft.com/help/5012120
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012141
Reference: https://support.microsoft.com/help/5012329
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012154
Reference: https://support.microsoft.com/help/5012324
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012130
Re
CVEList
.NET Framework Denial of Service Vulnerability
cvelistv5·2022-04-15·CVSS 7.5
CVE-2022-26832 [HIGH] .NET Framework Denial of Service Vulnerability
.NET Framework Denial of Service Vulnerability
.NET Framework Denial of Service Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-04-15
Published