CVE-2026-70162

Katalog CVE

CVSS 5.9 · Medium

Kerentanan Asymmetric Resource Consumption (Amplification). Skor CVSS 3.1 5.9 (Medium) menurut microsoft.com.

Deskripsi (NVD)

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.

Rincian

Terbit di NVD

13 Oktober 2026

Terakhir diubah

13 Oktober 2026

Status NVD

Awaiting Analysis

CVSS 3.1

5.9 (Medium), sumber microsoft.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-405: Asymmetric Resource Consumption (Amplification)

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162