CVE-2026-33116
Infinite Loop Vulnerability in .NET Causes Remote Denial of Service
Publication date: 2026-04-14
Last updated on: 2026-05-06
Assigner: Microsoft Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | .net | From 10.0.0 (inc) to 10.0.6 (exc) |
| microsoft | .net | From 8.0.0 (inc) to 8.0.26 (exc) |
| microsoft | .net | From 9.0.0 (inc) to 9.0.15 (exc) |
| microsoft | .net_framework | 3.5 |
| microsoft | .net_framework | 4.7.2 |
| microsoft | .net_framework | 4.6.2 |
| microsoft | .net_framework | 4.7 |
| microsoft | .net_framework | 4.7.1 |
| microsoft | .net_framework | 4.8 |
| microsoft | .net_framework | 4.8.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-835 | The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. |
| CWE-400 | The product does not properly control the allocation and maintenance of a limited resource. |
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an infinite loop caused by a loop with an unreachable exit condition in .NET, .NET Framework, and Visual Studio.
An unauthorized attacker can exploit this infinite loop to cause a denial of service over a network.
How can this vulnerability impact me? :
The vulnerability can be exploited by an unauthorized attacker to cause a denial of service (DoS) condition.
This means that affected systems running .NET, .NET Framework, or Visual Studio could become unresponsive or unavailable due to the infinite loop.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.