{"schemaVersion":3,"id":"CVE-2026-33116","aliases":["UBUNTU-CVE-2026-33116","CGA-22gx-9f8h-xx6f","CGA-28xp-2rp5-gh3h","CGA-2hr6-58wq-3rcf","CGA-2p6v-gmch-qvch","CGA-2q77-9gw8-x4x3","CGA-2v34-g28p-hrqq","CGA-2wj3-chgr-h23x","CGA-382r-cx68-3695","CGA-3c24-37wm-5f2c","CGA-3jgj-7g4r-3h7x","CGA-3qmf-jx87-42fc","CGA-3x48-3j5q-2xfx","CGA-422m-48g9-55v6","CGA-43m8-775v-c3v4","CGA-43pf-vr6p-r8gr","CGA-4f5f-7393-p6xm","CGA-4fpw-r798-59jh","CGA-4m3f-489x-6vrp","CGA-4q3w-h6mr-g9f7","CGA-4wmq-j39g-j363","CGA-52g5-3mg9-4942","CGA-537r-4fwj-jpph","CGA-54xr-579w-74qf","CGA-57m9-q28j-gqh6","CGA-5g2c-3p2j-9vvx","CGA-5h74-75xr-7mpc","CGA-5xj9-vg64-34c6","CGA-63r5-68rx-hxm9","CGA-6cj3-gg68-73xx","CGA-6r7r-f3fh-rggg","CGA-6vch-3959-mjx4","CGA-6w8j-fm7h-34j9","CGA-7233-x8x6-w6vq","CGA-7f54-8rff-35p9","CGA-7jff-rvgw-8cwx","CGA-7rch-2vgq-wvjx","CGA-7rgg-mpjw-cw3h","CGA-85cm-m8jf-qgmm","CGA-87vv-7f85-5fqj","CGA-8c86-vwwf-c987","CGA-8wg3-rvch-q768","CGA-8x9j-h8hf-gcxr","CGA-96vg-fq85-6c36","CGA-9fwj-9h44-mmr3","CGA-9ph4-vmpr-h46c","CGA-9xwv-p2qv-x824","CGA-c7v8-57c2-w99h","CGA-c9pp-3rp7-x55g","CGA-cc97-g3f7-9jqv","CGA-cg7r-r434-gww2","CGA-cgwm-88gj-cf6c","CGA-ch4p-3p7x-46qm","CGA-cjjx-7jcg-9mmw","CGA-cvv3-m4qc-c8rw","CGA-f23p-fj2f-gq5q","CGA-f6gw-wjg8-g2w4","CGA-f8q4-xw22-3qw8","CGA-f8vw-hh28-fff2","CGA-fmjm-59rp-7p69","CGA-fxjm-33mc-754m","CGA-g436-hrj2-4x66","CGA-g4fc-95xx-9936","CGA-gjwx-m2p7-m859","CGA-gp2r-29pf-2rxw","CGA-gpmp-7323-m3hc","CGA-gq77-frqm-7mvh","CGA-gr6m-qr65-hcxf","CGA-grhm-q98x-5x3q","CGA-gx96-pfxg-r2r5","CGA-h3vf-h24f-q933","CGA-h57v-w8pm-xmw5","CGA-h794-jgxf-c37p","CGA-h8f5-j58w-pjmx","CGA-hc9f-vw53-rh78","CGA-hf9r-q25m-47jv","CGA-hmh2-hx54-qppx","CGA-hmhq-58qf-329v","CGA-hrcw-h5xq-fjcm","CGA-hrwf-xmc9-m6w4","CGA-hwpc-qj64-622q","CGA-hx84-hc7g-h7fj","CGA-j36m-4527-gr35","CGA-j55p-6j7q-q34r","CGA-jqvg-94hq-p2hh","CGA-m6w8-2jcc-h59c","CGA-m7qx-4vp2-f4c9","CGA-m8c4-4gjf-f323","CGA-m9gq-83fx-m5f4","CGA-mf7c-v2m3-9qgf","CGA-mf8m-m3jc-4x66","CGA-mwhh-85ch-gv75","CGA-mww3-9h99-h3f6","CGA-pcq8-fgqp-q588","CGA-pg5p-jvj9-w8q6","CGA-pjpv-23j5-6p4c","CGA-pmqr-q3f6-28qx","CGA-pw9c-hmm6-q6gm","CGA-px2h-4gp7-89rg","CGA-q334-3g2r-4wx6","CGA-q57c-g5m4-v8ch","CGA-q64h-h83r-m9p8","CGA-q6f8-mm72-9vq3","CGA-q95m-f337-4qmh","CGA-qg5f-vr49-25xg","CGA-qpfx-vw3g-9j94","CGA-r3jf-x3m7-6hhm","CGA-rpmr-76vj-q6gm","CGA-rvh7-cr7f-3chq","CGA-v5wh-8r7q-jmfw","CGA-v84h-whq8-mfqf","CGA-v896-cgrw-rcwg","CGA-vgmm-3qrf-f2gf","CGA-w26r-q25g-7vvf","CGA-w7r8-mq66-6m78","CGA-wfx4-w7q9-q4f3","CGA-wgj3-56gp-vx8x","CGA-wj4r-hg46-m833","CGA-wjpp-rfx8-66wh","CGA-wp4p-fqcv-c979","CGA-wpv7-qwgf-9vm9","CGA-wv8h-hpf6-fw69","CGA-wvxr-5x3w-q3pr","CGA-ww8j-46xr-g2v6","CGA-wxvg-x8xv-vqqx","CGA-x6pf-x523-wm65","CGA-xjgf-vjcv-9mrr","CGA-xprr-wc9h-w8f3","CGA-xq92-8vcw-4c6g","CGA-xv28-hxrr-c49x","CGA-xwmv-2rjw-wwj2","GHSA-37gx-xxp4-5rgx","BIT-dotnet-2026-33116","BIT-dotnet-sdk-2026-33116"],"status":"published","duplicateOf":null,"title":null,"description":"Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.","dates":{"published":"2026-04-14T16:57:47.626Z","modified":"2026-10-15T15:52:59.382Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Nuget","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02444,"percentile":0.84112,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.3019999999999998,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.02142},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02444,"percentile":0.84112}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02142,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02444,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02444,"percentile":0.84112}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-835","name":"Loop with Unreachable Exit Condition ('Infinite Loop')","description":"The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/835.html"},{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"},{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"},{"id":"CWE-776","name":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","description":"The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/776.html"}],"affected":[{"vendor":"chainguard","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-10-sdk","purlType":"apk","versions":[{"text":"< 10.0.106-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.106-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-8-sdk","purlType":"apk","versions":[{"text":"< 8.0.126-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.126-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-9-sdk","purlType":"apk","versions":[{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"< 8.0.127-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.127-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"< 9.0.117-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.117-r0 | < 9.0.116-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.1","name":"dotnet-sdk-10.0.1","label":"dotnet-sdk-10.0.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.1","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"< 10.0.203-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.203-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.203-r1 | < 10.0.203-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"powershell","name":"powershell","label":"powershell","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/powershell","purlType":"apk","versions":[{"text":"< 7.6.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/promitor","purlType":"apk","versions":[{"text":"< 2.15.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-10-sdk","purlType":"apk","versions":[{"text":"< 10.0.106-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.106-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-8-sdk","purlType":"apk","versions":[{"text":"< 8.0.126-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.126-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-9-sdk","purlType":"apk","versions":[{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"< 8.0.127-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.127-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"< 9.0.117-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.117-r0 | < 9.0.116-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.1","name":"dotnet-sdk-10.0.1","label":"dotnet-sdk-10.0.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.1","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"< 10.0.203-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.203-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.203-r1 | < 10.0.203-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"powershell","name":"powershell","label":"powershell","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/powershell","purlType":"apk","versions":[{"text":"< 7.6.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/promitor","purlType":"apk","versions":[{"text":"< 2.15.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-r2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet10","name":"dotnet10","label":"dotnet10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet10","purlType":"deb","versions":[{"text":"< 10.0.106-10.0.6-0ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.106-10.0.6-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.107-10.0.7-0ubuntu1~26.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.106-10.0.6-0ubuntu1~24.04.1 | < 10.0.106-10.0.6-0ubuntu1~25.10.1 | < 10.0.107-10.0.7-0ubuntu1~26.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet6","name":"dotnet6","label":"dotnet6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet7","name":"dotnet7","label":"dotnet7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet8","name":"dotnet8","label":"dotnet8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet8","purlType":"deb","versions":[{"text":"< 8.0.126-8.0.26-0ubuntu1~22.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.126-8.0.26-0ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.126-8.0.26-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.126-8.0.26-0ubuntu1~22.04.1 | < 8.0.126-8.0.26-0ubuntu1~24.04.1 | < 8.0.126-8.0.26-0ubuntu1~25.10.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet9","name":"dotnet9","label":"dotnet9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet9","purlType":"deb","versions":[{"text":"< 9.0.116-9.0.15-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-9.0.15-0ubuntu1~25.10.1","eol":null,"hubHref":null},{"vendor":"microsoft","product":"microsoft .net framework 3.5","name":"Microsoft .NET Framework 3.5","label":"microsoft .net framework 3.5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.5.0, < 2.0.50727.8982 & 3.0.30729.8976","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.5.0, < 2.0.50727.8982 & 3.0.30729.8976","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.7.2","name":"Microsoft .NET Framework 3.5 AND 4.7.2","label":"microsoft .net framework 3.5 and 4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_472"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8","name":"Microsoft .NET Framework 3.5 AND 4.8","label":"microsoft .net framework 3.5 and 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_48"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8.1","name":"Microsoft .NET Framework 3.5 AND 4.8.1","label":"microsoft .net framework 3.5 and 4.8.1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.1, < 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.1, < 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_481"},{"vendor":"microsoft","product":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","name":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","label":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 4.8.4801.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 4.8.4801.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_46247471472"},{"vendor":"microsoft","product":"microsoft .net framework 4.8","name":"Microsoft .NET Framework 4.8","label":"microsoft .net framework 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 4.8.4801.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 4.8.4801.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_48"},{"vendor":"microsoft","product":".net","name":".net","label":".net","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.26","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.6 | ≥ 8.0.0, < 8.0.26 | ≥ 9.0.0, < 9.0.15","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"dotnet","label":"Microsoft .NET","category":"framework"}},"hubHref":"/vendor/microsoft/net"},{"vendor":"microsoft","product":".net 10.0","name":".NET 10.0","label":".net 10.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.6","eol":null,"hubHref":"/vendor/microsoft/net_100"},{"vendor":"microsoft","product":".net 8.0","name":".NET 8.0","label":".net 8.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0, < 8.0.26","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.26","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0, < 8.0.26 | ≥ 8.0.0, < 8.0.26","eol":null,"hubHref":"/vendor/microsoft/net_80"},{"vendor":"microsoft","product":".net 9.0","name":".NET 9.0","label":".net 9.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.0.0, < 9.0.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.0.0, < 9.0.15","eol":null,"hubHref":"/vendor/microsoft/net_90"},{"vendor":"microsoft","product":".net_framework","name":".NET Framework","label":".net_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.5","noFixRecorded":false,"fixedIn":null},{"text":"4.7.2","noFixRecorded":false,"fixedIn":null},{"text":"4.6.2","noFixRecorded":false,"fixedIn":null},{"text":"4.7","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1","noFixRecorded":false,"fixedIn":null},{"text":"4.8","noFixRecorded":false,"fixedIn":null},{"text":"4.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.5 | 4.7.2 | 4.6.2 | 4.7 | 4.7.1 | 4.8 | 4.8.1","eol":null,"hubHref":"/vendor/microsoft/net_framework"},{"vendor":"NuGet","product":"System.Security.Cryptography.Xml","name":"System.Security.Cryptography.Xml","label":"System.Security.Cryptography.Xml","ecosystem":"NuGet","cpePart":null,"purl":"pkg:nuget/System.Security.Cryptography.Xml","purlType":"nuget","versions":[{"text":"≥ 10.0.0, < 10.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.6 | ≥ 9.0.0, < 9.0.15 | ≥ 8.0.0, < 8.0.3","eol":null,"hubHref":null}],"affectedCount":37,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch","REPORT","WEB"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33116","label":"access.redhat.com/security/cve/CVE-2026-33116","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457741","label":"bugzilla.redhat.com/show_bug.cgi?id=2457741","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","label":"access.redhat.com/errata/RHSA-2026:13281","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","label":"access.redhat.com/errata/RHSA-2026:13280","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","label":"access.redhat.com/errata/RHSA-2026:8467","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","label":"access.redhat.com/errata/RHSA-2026:8470","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","label":"access.redhat.com/errata/RHSA-2026:8472","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","label":"access.redhat.com/errata/RHSA-2026:8473","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","label":"access.redhat.com/errata/RHSA-2026:8468","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","label":"access.redhat.com/errata/RHSA-2026:8475","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","label":"access.redhat.com/errata/RHSA-2026:13693","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","label":"access.redhat.com/errata/RHSA-2026:13283","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","label":"access.redhat.com/errata/RHSA-2026:13282","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","label":"access.redhat.com/errata/RHSA-2026:8471","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","label":"access.redhat.com/errata/RHSA-2026:8469","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","label":"access.redhat.com/errata/RHSA-2026:8474","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","label":"access.redhat.com/errata/RHSA-2026:9077","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","label":"access.redhat.com/errata/RHSA-2026:9080","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","label":"access.redhat.com/errata/RHSA-2026:9205","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://ubuntu.com/security/CVE-2026-33116","label":"ubuntu.com/security/CVE-2026-33116","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33116","label":"www.cve.org/CVERecord?id=CVE-2026-33116","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-april-2026-servicing-updates","label":"devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-april-2026-servicing-updates","hostname":"devblogs.microsoft.com","tags":["REPORT"]},{"url":"https://github.com/dotnet/announcements/issues/392","label":"github.com/dotnet/announcements/issues/392","hostname":"github.com","tags":["REPORT","WEB"]},{"url":"https://ubuntu.com/security/notices/USN-8176-1","label":"ubuntu.com/security/notices/USN-8176-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8216-1","label":"ubuntu.com/security/notices/USN-8216-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-37gx-xxp4-5rgx","label":"github.com/dotnet/runtime/security/advisories/GHSA-37gx-xxp4-5rgx","hostname":"github.com","tags":["WEB"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33116","label":"nvd.nist.gov/vuln/detail/CVE-2026-33116","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/dotnet/runtime","label":"github.com/dotnet/runtime","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:13280","RHSA-2026:13281","RHSA-2026:13282","RHSA-2026:13283","RHSA-2026:13693","RHSA-2026:8467","RHSA-2026:8468","RHSA-2026:8469","RHSA-2026:8470","RHSA-2026:8471","RHSA-2026:8472","RHSA-2026:8473","RHSA-2026:8474","RHSA-2026:8475","RHSA-2026:9077","RHSA-2026:9080","RHSA-2026:9205"],"duplicates":[],"related":["CGA-QQ7F-CMWQ-26WF","USN-8176-1","USN-8216-1"]},"timeline":[{"kind":"published","date":"2026-04-14T16:57:47.626Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-15T15:52:59.382Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T06:34:45.479Z","stale":false,"partial":false}}