CVE-2026-62901

Analyzed Analyzed - Analysis Complete

Unchecked Loop Condition in .NET Leads to DoS

Publication date: 2026-08-11

Last updated on: 2026-08-14

Assigner: Microsoft Corporation

Description

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-14

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-62901

EUVD

EUVD-2026-56409

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	visual_studio_2022	From 17.14.0 (inc) to 17.14.38 (exc)
microsoft	visual_studio_2026	From 18.8.0 (inc) to 18.8.3 (exc)
microsoft	.net	From 8.0.0 (inc) to 8.0.30 (exc)
microsoft	.net	From 9.0.0 (inc) to 9.0.19 (exc)
microsoft	.net	From 10.0.0 (inc) to 10.0.11 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-606	The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

Attack-Flow Graph

Executive Summary

This vulnerability involves an unchecked input for loop condition in .NET. An unauthorized attacker can exploit this to cause a denial of service over a network by triggering an infinite loop or excessive resource consumption.

Detection Guidance

This vulnerability involves unchecked input for loop conditions in .NET, which could lead to denial of service. Detection typically requires reviewing .NET application code for improper loop condition handling. No specific commands are provided in the available resources.

Impact Analysis

The impact includes service disruption as the vulnerability allows attackers to consume system resources, leading to degraded performance or complete unavailability of affected services.

Compliance Impact

This vulnerability enables denial-of-service attacks, which could disrupt services handling sensitive data. GDPR requires data protection measures, and HIPAA mandates availability of healthcare systems. Unpatched systems may fail compliance due to service disruptions.

Mitigation Strategies

Apply the latest security updates from Microsoft for .NET as soon as they become available. Monitor Microsoft's update guide for patches addressing this vulnerability.

Hi! I’m here to help you understand CVE-2026-62901. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70