GHSA-c399-9853-6jmjPublished

Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability

Exact source revision recorded 23 Oct 2026 16:01:25 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

osv · GHSA-c399-9853-6jmj

Published

System.Security.Cryptography.Xml

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

System.Security.Cryptography.Xml

NuGet

ECOSYSTEM · introduced 11.0.0-preview.1 → fixed 11.0.0-rc.2

System.Security.Cryptography.Xml

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.5

5 explicitly affected versions

8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4

System.Security.Cryptography.Xml

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9