← Back

CVE-2026-56170

nvd nist
Published: Jul 14, 2026Modified: Jul 22, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected (3)

Products: Microsoft: .net
Microsoft
1 product
.net
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net
From 8.0.0 to 8.0.29
.net
From 9.0.0 to 9.0.18
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
.net
From 10.0.0 to 10.0.6
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

Source: secure@microsoft.com
PatchVendor Advisory

Timeline

No history available yet.