CVE-2026-62901
Received Received - Intake

Unchecked Loop Condition in .NET Leads to DoS

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Microsoft Corporation

Description
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-62901
EUVD
EUVD-2026-56409

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microsoft .net *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-606 The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves an unchecked input for loop condition in .NET. An unauthorized attacker can exploit this to cause a denial of service over a network by triggering an infinite loop or excessive resource consumption.

Impact Analysis

The impact includes service disruption as the vulnerability allows attackers to consume system resources, leading to degraded performance or complete unavailability of affected services.

Mitigation Strategies

Apply the latest security updates from Microsoft for .NET as soon as they become available. Monitor Microsoft's update guide for patches addressing this vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-62901. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart