CVE-2026-96233
published 2026-10-13CVE-2026-96233: Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
PriorityP348high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.99%
62.3th percentile
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected
63 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft.netcore.app.runtime.linux-arm | >= 10.0.0 < 10.0.13 | 10.0.13 |
| microsoft | microsoft.netcore.app.runtime.linux-arm | >= 11.0.0-preview.1 < 11.0.0-rc.2 | 11.0.0-rc.2 |
| microsoft | microsoft.netcore.app.runtime.linux-arm | >= 8.0.0 < 8.0.32 | 8.0.32 |
| microsoft | microsoft.netcore.app.runtime.linux-arm | >= 9.0.0 < 9.0.21 | 9.0.21 |
| microsoft | microsoft.netcore.app.runtime.linux-arm64 | >= 10.0.0 < 10.0.13 | 10.0.13 |
| microsoft | microsoft.netcore.app.runtime.linux-arm64 | >= 11.0.0-preview.1 < 11.0.0-rc.2 | 11.0.0-rc.2 |
| microsoft | microsoft.netcore.app.runtime.linux-arm64 | >= 8.0.0 < 8.0.32 | 8.0.32 |
| microsoft | microsoft.netcore.app.runtime.linux-arm64 | >= 9.0.0 < 9.0.21 | 9.0.21 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm | >= 10.0.0 < 10.0.13 | 10.0.13 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm | >= 11.0.0-preview.1 < 11.0.0-rc.2 | 11.0.0-rc.2 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm | >= 8.0.0 < 8.0.32 | 8.0.32 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm | >= 9.0.0 < 9.0.21 | 9.0.21 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm64 | >= 10.0.0 < 10.0.13 | 10.0.13 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm64 | >= 11.0.0-preview.1 < 11.0.0-rc.2 | 11.0.0-rc.2 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm64 | >= 8.0.0 < 8.0.32 | 8.0.32 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-arm64 | >= 9.0.0 < 9.0.21 | 9.0.21 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-x64 | >= 10.0.0 < 10.0.13 | 10.0.13 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-x64 | >= 11.0.0-preview.1 < 11.0.0-rc.2 | 11.0.0-rc.2 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-x64 | >= 8.0.0 < 8.0.32 | 8.0.32 |
| microsoft | microsoft.netcore.app.runtime.linux-musl-x64 | >= 9.0.0 < 9.0.21 | 9.0.21 |
| microsoft | microsoft.netcore.app.runtime.linux-x64 | >= 10.0.0 < 10.0.13 | 10.0.13 |
| microsoft | microsoft.netcore.app.runtime.linux-x64 | >= 11.0.0-preview.1 < 11.0.0-rc.2 | 11.0.0-rc.2 |
| microsoft | microsoft.netcore.app.runtime.linux-x64 | >= 8.0.0 < 8.0.32 | 8.0.32 |
| microsoft | microsoft.netcore.app.runtime.linux-x64 | >= 9.0.0 < 9.0.21 | 9.0.21 |
| microsoft | microsoft.netcore.app.runtime.osx-arm64 | >= 10.0.0 < 10.0.13 | 10.0.13 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ghsa7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
.NET vulnerabilities
vendor_ubuntu·2026-10-20
CVE-2026-70188 .NET vulnerabilities
Title: .NET vulnerabilities
Summary: Several security issues were fixed in .NET.
Multiple security issues were discovered in .NET and this update includes
new upstream .NET versions to fix these issues.
.NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
.NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS
and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10.
In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
vendor_redhat·2026-10-13·CVSS 7.5
CVE-2026-96233 [HIGH] dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Package: dotnet10.0 (Red Hat Enterprise Linux 10) - Affected
Package: dotnet8.0 (Red Hat Enterprise Linux 10) - Affected
Package: dotnet9.0 (Red Hat Enterprise Linux 10) - Affected
Package: dotnet10.0 (Red Hat Enterprise Linux 8) - Affected
Package: dotnet8.0 (Red Hat Enterprise Linux 8) - Affected
Package: dotnet9.0 (Red Hat Enterprise Linux 8) - Affected
Package: dotnet10.0 (Red Hat Enterprise Linux 9) - Affected
Package: dotnet8.0 (Red Hat Enterprise Linux 9) - Affected
Package: dotnet9.0 (Red
VulDB
Microsoft .NET/Visual Studio DateTime Hebrew-number Parsing out-of-bounds write
vuldb·2026-10-14·CVSS 7.5
CVE-2026-96233 [HIGH] Microsoft .NET/Visual Studio DateTime Hebrew-number Parsing out-of-bounds write
A vulnerability was found in Microsoft .NET and Visual Studio and classified as problematic. This affects an unknown function of the component DateTime Hebrew-number Parsing. Executing a manipulation can lead to out-of-bounds write.
The identification of this vulnerability is CVE-2026-96233. The attack may be launched remotely. There is no exploit available.
A patch should be applied to remediate this issue.
GHSA
Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability
ghsa·2026-10-13·CVSS 7.5
CVE-2026-96233 [HIGH] CWE-787 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability
## Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in System.Runtime. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
DateTime Hebrew-number parsing can read outside expected stack bounds and terminate the process.
## Announcement
Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/481
## CVSS Details
- **Version:** 3.1
- **Severity:** High
- **Score:** 7.5
- **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
- **Weakness:** CWE-787 (Out-of-bounds Write)
## Affected Platforms
- **Platforms:** Windows, Li
No detection rules found.
No public exploits indexed.
Sans Isc
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
blogs_sans_isc·2026-10-13·CVSS 8.8
CVE-2026-96951 [HIGH] October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
October 2026 Microsoft Patch Tuesday
Published: 2026-10-13. Last Updated: 2026-10-13 19:25:52 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and one is already exploited.
CVE-2026-96951: An already exploited Windows Shell Security Feature Bypass Vulnerability. This vulnerabliity allows bypassing the "Mark of the Web" making it easier to exeucte code by sending a malicious message to a user via e-mail or instant messaging. The victim will still have to open the file.
CVE-2026-108398: This vulnerability, a .NET framework security feature bypass, could be
Rapid7
Patch Tuesday - October 2026
blogs_rapid7·2026-10-13·CVSS 8.8
CVE-2026-96951 [HIGH] Patch Tuesday - October 2026
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday , including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well as public disclosure for two others.
## Windows Shell: zero-day security feature bypass
The Windows Shell is Microsoft’s term for the GUI interaction logic for the entire OS provided by explorer.exe and associated libraries and APIs, and for the second time this year , the Windows Shell is the site
Bugzilla
CVE-2026-96959 dotnet10.0: .NET: Denial of Service via unthrottled resource allocation [fedora-43]
bugzilla·2026-10-23·CVSS 8.8
CVE-2026-96959 [HIGH] CVE-2026-96959 dotnet10.0: .NET: Denial of Service via unthrottled resource allocation [fedora-43]
CVE-2026-96959 dotnet10.0: .NET: Denial of Service via unthrottled resource allocation [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Discussion:
Closing/resolving as this was fixed in https://bodhi.fedoraproject.org/updates/FEDORA-2026-c7c459ff4d
Update to .NET SDK 10.0.113 and Runtime 10.0.13
Fixes: CVE-2026-102870,CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70161,CVE-2026-70162,CVE-2026-70165,CVE-2026-7
Bugzilla
CVE-2026-96233 dotnet9.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
bugzilla·2026-10-19·CVSS 7.5
CVE-2026-96233 [HIGH] CVE-2026-96233 dotnet9.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
CVE-2026-96233 dotnet9.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected products:
- .NET Runtime Libraries (release 10.0): 10.0.0 - 10.0.12; fixed 10.0.13
- .NET Runtime Libraries (release 11.0): 11.0.0-preview.1 - 11.0.0-rc.1; fixed 11.0.0-rc.2
- .NET Runtime Libraries (release 8.0): 8.0.0 - 8.0.31; fixed 8.0.32
- .NET Runtime Libraries (release 9.0): 9.0.0 - 9.0.20; fixed 9.0.21
Bugzilla
CVE-2026-96233 dotnet8.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
bugzilla·2026-10-19·CVSS 7.5
CVE-2026-96233 [HIGH] CVE-2026-96233 dotnet8.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
CVE-2026-96233 dotnet8.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected products:
- .NET Runtime Libraries (release 10.0): 10.0.0 - 10.0.12; fixed 10.0.13
- .NET Runtime Libraries (release 11.0): 11.0.0-preview.1 - 11.0.0-rc.1; fixed 11.0.0-rc.2
- .NET Runtime Libraries (release 8.0): 8.0.0 - 8.0.31; fixed 8.0.32
- .NET Runtime Libraries (release 9.0): 9.0.0 - 9.0.20; fixed 9.0.21
Bugzilla
CVE-2026-96233 dotnet10.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
bugzilla·2026-10-19·CVSS 7.5
CVE-2026-96233 [HIGH] CVE-2026-96233 dotnet10.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
CVE-2026-96233 dotnet10.0: ASP.NET Core Denial of Service Vulnerability [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected products:
- .NET Runtime Libraries (release 10.0): 10.0.0 - 10.0.12; fixed 10.0.13
- .NET Runtime Libraries (release 11.0): 11.0.0-preview.1 - 11.0.0-rc.1; fixed 11.0.0-rc.2
- .NET Runtime Libraries (release 8.0): 8.0.0 - 8.0.31; fixed 8.0.32
- .NET Runtime Libraries (release 9.0): 9.0.0 - 9.0.20; fixed 9.0.21
Bugzilla
CVE-2026-96233 dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
bugzilla·2026-10-09·CVSS 7.5
CVE-2026-96233 [HIGH] CVE-2026-96233 dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
CVE-2026-96233 dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected products:
- .NET Runtime Libraries (release 10.0): 10.0.0 - 10.0.12; fixed 10.0.13
- .NET Runtime Libraries (release 11.0): 11.0.0-preview.1 - 11.0.0-rc.1; fixed 11.0.0-rc.2
- .NET Runtime Libraries (release 8.0): 8.0.0 - 8.0.31; fixed 8.0.32
- .NET Runtime Libraries (release 9.0): 9.0.0 - 9.0.20; fixed 9.0.21
2026-10-13
Published