{"id":"CVE-2026-70162","revision":"9381a838d7084c879fa84c48d33bd890","records":[{"revision":"9381a838d7084c879fa84c48d33bd890","observedAt":"2026-10-25T15:18:57.446+00:00","statement":{"source":"nvd","id":"CVE-2026-70162","aliases":[],"title":"A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.","description":"A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.\nThe update addresses the vulnerability by correcting how the .NET web application handles web requests.","state":0,"publishedAt":"2026-10-13T19:19:29.803+00:00","modifiedAt":"2026-10-22T22:18:32.663+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · secure@microsoft.com · Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","score":5.9,"severity":"MEDIUM"}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-70162","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Awaiting Analysis","weaknesses":["CWE-405"],"productCriteria":[],"sourceDates":{"published":"2026-10-13T19:19:29.803","lastModified":"2026-10-22T22:18:32.663"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-70162","identifiers":["CVE-2026-70162"]},"retained":false,"historicalAffected":[]}],"coverage":[]}