{"id":"EUVD-2026-100402","enisaUuid":"14227a86-601b-31a8-959d-949abe8475ae","description":"A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.\nThe update addresses the vulnerability by correcting how the .NET web application handles web requests.","datePublished":"Oct 13, 2026, 7:01:37 PM","dateUpdated":"Oct 31, 2026, 6:12:55 PM","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162\n","aliases":"CVE-2026-70162\nGHSA-2fmv-rv2c-59x7\n","assigner":"microsoft","epss":0.9,"enisaIdProduct":[{"id":"64b3bdd5-a361-3fdc-a430-5f706c1fdad5","product":{"name":"System.Security.Cryptography.Pkcs","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.13"},{"id":"7109ccdf-d8f3-3a2d-9a46-1a8a9f45d464","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"},{"id":"b6180c26-0bee-3db0-b520-1b8cb361adb5","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"}],"enisaIdVendor":[{"id":"fcb12974-0b6b-3fe9-9198-595a5f41d86b","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"696ad639-7094-3e22-add2-b36160e55838","vulnerability":{"id":"CVE-2026-70162","description":"A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.\nThe update addresses the vulnerability by correcting how the .NET web application handles web requests.","datePublished":"Oct 13, 2026, 7:01:37 PM","dateUpdated":"Oct 31, 2026, 6:12:55 PM","status":"PUBLISHED","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162\n","enisa_id":"EUVD-2026-100402\n","assigner":"microsoft","epss":0.9,"dataProcessed":"Nov 1, 2026, 1:00:22 PM","vulnerabilityProduct":[{"id":"395de781-ad9b-3556-9aa3-c0a22548f144","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"},{"id":"5fda1826-18ca-32bd-845c-6ebccc4b0ccb","product":{"name":"System.Security.Cryptography.Pkcs","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.13"},{"id":"9d3b1967-d423-3ee8-bf1b-8cde4d2e1dae","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"}],"vulnerabilityVendor":[{"id":"328ca521-787d-3232-8f1c-ecd0cf32a344","vendor":{"name":"Microsoft"}}]}},{"id":"9a5522d2-7e56-3a11-bad1-7b144d56d98a","vulnerability":{"id":"GHSA-2fmv-rv2c-59x7","description":"Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability","datePublished":"Oct 13, 2026, 8:07:20 PM","dateUpdated":"Oct 19, 2026, 7:17:49 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-2fmv-rv2c-59x7\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-70162\nhttps://github.com/dotnet/announcements/issues/454\nhttps://github.com/dotnet/runtime/issues/135699\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162\n","enisa_id":"EUVD-2026-100402\n","aliases":"CVE-2026-70162\nGHSA-2fmv-rv2c-59x7\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"b6753251-ac37-34b1-bb53-542fdb31e23c","advisory":{"id":"WID-SEC-W-2026-3893","description":"Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft .NET, Microsoft ASP.NET, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026, Microsoft Visual Studio Code, Microsoft SysInternals und Microsoft PowerShell ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service Zustand herbeizuführen.","datePublished":"Oct 13, 2026, 10:00:00 PM","dateUpdated":"Oct 28, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3893.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3893\n","aliases":"CVE-2026-100205\nCVE-2026-102229\nCVE-2026-102231\nCVE-2026-102232\nCVE-2026-102233\nCVE-2026-102234\nCVE-2026-102235\nCVE-2026-102238\nCVE-2026-102851\nCVE-2026-102869\nCVE-2026-102870\nCVE-2026-103572\nCVE-2026-105016\nCVE-2026-105729\nCVE-2026-105732\nCVE-2026-108398\nCVE-2026-109468\nCVE-2026-58280\nCVE-2026-66822\nCVE-2026-69370\nCVE-2026-69651\nCVE-2026-70007\nCVE-2026-70035\nCVE-2026-70098\nCVE-2026-70159\nCVE-2026-70161\nCVE-2026-70162\nCVE-2026-70165\nCVE-2026-70174\nCVE-2026-70175\nCVE-2026-70179\nCVE-2026-70181\nCVE-2026-70183\nCVE-2026-70186\nCVE-2026-70188\nCVE-2026-70190\nCVE-2026-70194\nCVE-2026-70196\nCVE-2026-70197\nCVE-2026-83520\nCVE-2026-84008\nCVE-2026-85363\nCVE-2026-85790\nCVE-2026-87697\nCVE-2026-88092\nCVE-2026-92707\nCVE-2026-96222\nCVE-2026-96224\nCVE-2026-96225\nCVE-2026-96229\nCVE-2026-96230\nCVE-2026-96231\nCVE-2026-96232\nCVE-2026-96233\nCVE-2026-96234\nCVE-2026-96235\nCVE-2026-96236\nCVE-2026-96237\nCVE-2026-96238\nCVE-2026-96251\nCVE-2026-96303\nCVE-2026-96957\nCVE-2026-96958\nCVE-2026-96959\nCVE-2026-96960\nCVE-2026-97788\nCVE-2026-97801\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0340e93b-e31d-31c8-9716-c4971e513544","product":{"name":"4.7","vendor":{"name":"Microsoft"}}},{"id":"03c9c371-3cb7-302c-a7c0-9c05938ff6e8","product":{"name":"SysInternals","vendor":{"name":"Microsoft"}}},{"id":"0ac83f74-b3dc-304d-ab10-d6963613cf12","product":{"name":"11","vendor":{"name":"Johnson Controls Inc"}}},{"id":"21a3f534-4ba8-3a00-9e47-8c0c83e6a34b","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"22f71178-78df-30dc-9023-f27809c7b39c","product":{"name":".NET","vendor":{"name":"Microsoft"}}},{"id":"23edd4a1-5a5b-30ec-9d5d-5c0981459269","product":{"name":"Microsoft Visual Studio Code","vendor":{"name":"Microsoft"}}},{"id":"2e108811-5978-3adb-9a0e-16130ec8031c","product":{"name":"4.8.1","vendor":{"name":"Microsoft"}}},{"id":"34ebc4d2-395d-3450-8e9c-31e56187cf1e","product":{"name":"4.8","vendor":{"name":"Microsoft"}}},{"id":"3b371dad-aaae-3522-bedd-a36f6148fd4b","product":{"name":"RESF Rocky Linux","vendor":{"name":"RESF"}}},{"id":"5a10e7cf-eae5-3db9-8d85-767701f65e2f","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"6115b60c-ecd1-33b2-8204-57e664bb310d","product":{"name":"4.7.2","vendor":{"name":"Microsoft"}}},{"id":"6c421a13-fd00-3275-8347-a7f6d33b163c","product":{"name":"10","vendor":{"name":"Johnson Controls Inc"}}},{"id":"731dc4cd-be7e-3a40-ae24-619da672e2d4","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"79081812-d806-390a-bb45-610d615d0c71","product":{"name":".NET Framework","vendor":{"name":"Microsoft"}}},{"id":"7935fc7e-63b8-32aa-8f72-d3be4bb14062","product":{"name":"Core 10.0","vendor":{"name":"Microsoft"}}},{"id":"7a37837c-55aa-3842-ac93-a89ed40d8b57","product":{"name":"7.6","vendor":{"name":"OpenBSD"}}},{"id":"8464fe56-2245-3772-bcb7-2ce4e0849161","product":{"name":"3.5","vendor":{"name":"Microsoft"}}},{"id":"8491a010-e09c-36f9-8793-3da2b347e064","product":{"name":"Fedora Linux","vendor":{"name":"Fedora"}}},{"id":"88a3eb7f-0a2d-3d83-ba6a-7fb565e04d3e","product":{"name":"4.7.1","vendor":{"name":"Microsoft"}}},{"id":"96663408-331d-3be4-9821-baee53eaed32","product":{"name":"Microsoft Visual Studio 2022","vendor":{"name":"Microsoft"}}},{"id":"9cc63617-e6d6-3dec-bcb1-cb3637c83420","product":{"name":"8","vendor":{"name":"National Oceanic and Atmospheric Administration (NOAA)"}}},{"id":"a42f41bd-00df-34ef-ad93-957fe0b905a1","product":{"name":"suite","vendor":{"name":"frappe"}}},{"id":"b0799acb-e04f-3a6a-a138-96edf96a610a","product":{"name":"ASP.NET","vendor":{"name":"Microsoft"}}},{"id":"b6b1e21b-3cb9-3ba5-a11a-65c4547cc661","product":{"name":"Core 11.0","vendor":{"name":"Microsoft"}}},{"id":"c6e73efc-ae5a-33ca-9dc4-02fd378cff3a","product":{"name":"9","vendor":{"name":"NetApp"}}},{"id":"ca1e0db2-25ac-3899-8644-de0c25421ef9","product":{"name":"Core 8.0","vendor":{"name":"Microsoft"}}},{"id":"d366f78c-999d-382e-a819-eb3900735d86","product":{"name":"4.6.2","vendor":{"name":"open source"}}},{"id":"d518e09f-0bc2-3ea6-9d84-daa73e056e38","product":{"name":"Core 9.0","vendor":{"name":"Microsoft"}}},{"id":"d877fca2-dac8-30aa-86b1-d9f69483c4b2","product":{"name":"7.4","vendor":{"name":"AVEVA Software, LLC"}}},{"id":"e1548bc1-8b2a-360e-8600-045722d0f2a3","product":{"name":"Microsoft Visual Studio 2026","vendor":{"name":"Microsoft"}}},{"id":"e28c6dd0-e838-3510-90e8-10b54febe4de","product":{"name":"7.5","vendor":{"name":"OpenBSD"}}},{"id":"e50e4638-bf31-3f9e-85be-5c76ef507287","product":{"name":"PowerShell","vendor":{"name":"Microsoft"}}},{"id":"f362c276-1be6-31ad-83fc-bceab2e1b52b","product":{"name":"Windows Process Monitor","vendor":{"name":"Microsoft"}}}]}}]}