CVE-2026-84008

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in .NET Due to Algorithmic Complexity

Publication date: 2026-10-13

Last updated on: 2026-10-22

Assigner: Microsoft Corporation

Description

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-22

Generated

2026-11-08

AI Q&A

2026-10-14

EPSS Evaluated

2026-11-07

NVD

CVE-2026-84008

EUVD

EUVD-2026-100199

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Microsoft .NET Framework 3.5	3.5.0
Microsoft	Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2	3.0.0.0
Microsoft	Microsoft .NET Framework 3.5 AND 4.7.2	4.7.0
Microsoft	Microsoft .NET Framework 3.5 AND 4.8	4.8.0
Microsoft	Microsoft .NET Framework 3.5 AND 4.8.1	4.8.1
Microsoft	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2	4.7.0
Microsoft	Microsoft .NET Framework 4.8	4.8.0
Microsoft	Microsoft .NET Framework 4.8.1	4.8.0.0
Microsoft	Microsoft Visual Studio 2022 version 17.14	17.14.0
Microsoft	Microsoft Visual Studio 2026 version 18.10	18.10.0
Microsoft	System.Security.Cryptography.Pkcs	10.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-407	An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

Attack-Flow Graph

Executive Summary

This vulnerability involves inefficient algorithmic complexity in .NET, which allows an unauthorized attacker to cause a denial of service over a network. This means the attacker can exploit flaws in how certain operations are processed to consume excessive system resources, making services unavailable to legitimate users.

Impact Analysis

This vulnerability can lead to service disruptions, causing applications or systems using affected .NET versions to become slow or unresponsive. Users may experience downtime, reduced performance, or complete unavailability of services relying on .NET frameworks.

Mitigation Strategies

Apply the latest security updates from Microsoft for .NET Framework and Visual Studio as soon as they become available. Monitor Microsoft's security advisories for patches addressing this vulnerability.

Hi! I’m here to help you understand CVE-2026-84008. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...