{"schemaVersion":3,"id":"CVE-2026-70162","aliases":["GHSA-2fmv-rv2c-59x7","CGA-234p-382r-fvj2","CGA-289j-mcj9-72m4","CGA-2c2h-6fp4-jmw2","CGA-2cxm-w6pm-hfxq","CGA-2fjv-c46h-v95g","CGA-2mvx-244v-h8v5","CGA-2q65-37qp-32hj","CGA-2w35-6fm8-jx4h","CGA-2x8c-7cmh-j6xc","CGA-32vv-gj5q-q63w","CGA-33px-vc65-7gjx","CGA-3qw2-76p5-j8xq","CGA-3vg9-wg9f-5rjf","CGA-3vww-6796-cqg8","CGA-3x62-2vxf-mff4","CGA-42cj-p68p-gp95","CGA-47h5-4phh-h3hc","CGA-49p8-6h8v-5q24","CGA-4phw-jcxc-2wj6","CGA-4pqj-hqg9-4gm7","CGA-5232-f7ww-f8fx","CGA-57wf-w97g-2g92","CGA-5g76-m3rh-4gv8","CGA-6xgq-q9fh-2j88","CGA-77p3-29rg-7m7g","CGA-7j99-979g-v7x8","CGA-7rqg-58fc-g8vr","CGA-7vjj-89j9-wg2v","CGA-8242-863j-m7j8","CGA-83vf-g26v-rcmc","CGA-86ph-cqqc-g78c","CGA-87hf-3mp8-ww49","CGA-8vm7-x4fq-86f9","CGA-8x3g-x4hw-qwrf","CGA-97mf-4rgh-m668","CGA-9mc5-98wq-pwjx","CGA-9phr-366g-qg8q","CGA-9x8f-wr8h-4rg6","CGA-c2jj-5f2r-g86c","CGA-cjv2-2pp5-5523","CGA-cmgg-g3p4-8v29","CGA-cmr6-59gw-92mq","CGA-cp49-wgjv-jc8h","CGA-cp63-q8q3-mx2r","CGA-f5jc-f6fj-rm54","CGA-f6hq-4qf6-w89g","CGA-f6r9-gw7j-5hxr","CGA-ffvm-mpc9-qjvw","CGA-fg2r-3rw6-3ph4","CGA-fg65-7x3j-rv3m","CGA-fhpp-pjr5-f7jp","CGA-fvfr-v9h4-vh5r","CGA-g22m-pwj2-3q7q","CGA-g7qw-gjw2-5cc7","CGA-gh4c-hqwh-vr4g","CGA-gpf4-m4vw-55fr","CGA-grcw-wjq7-42p5","CGA-gw57-qg75-47mv","CGA-h62x-7qwj-jm4q","CGA-hwqx-vc3f-87m9","CGA-j3rf-pcx2-mrh9","CGA-j7rp-mpc6-3w5h","CGA-j7xp-r958-vxp7","CGA-jfj3-f493-mr7w","CGA-jhh8-7cm7-56g4","CGA-jj47-446x-933f","CGA-jmjj-cmrg-4mc9","CGA-jq78-f3q7-pff2","CGA-jwc9-vcw6-r9cp","CGA-m9vh-59x6-3jrh","CGA-mcpx-xh5c-6v5r","CGA-mfhp-h2x3-g4j4","CGA-mhhj-rgjv-6rqq","CGA-mjjr-phrq-v2rr","CGA-mxgg-jhqc-8vpv","CGA-p2vh-fh5c-3q4g","CGA-p3jq-v95p-v7g8","CGA-p72q-pf2g-xx88","CGA-q2mg-vc2h-299v","CGA-q4vh-fcr9-x43h","CGA-q6mx-6rfx-3frw","CGA-qp6x-7jqp-hjj2","CGA-qvc8-7j2g-xpw4","CGA-r63f-m23x-fc3r","CGA-r78w-5g46-55xm","CGA-r8p5-mcxv-4r7f","CGA-rh7h-4gjm-56c2","CGA-rpfp-vcqw-h4q4","CGA-rwqj-fqv9-2xxm","CGA-rxmj-pf88-fp4p","CGA-v5c9-rxvj-j9hf","CGA-v7hw-mjgm-wp56","CGA-vpvj-4jhh-vp99","CGA-vvpm-hcmm-qmpv","CGA-w4x3-qpmj-5vhx","CGA-w5q4-h7cj-wjg2","CGA-wh5r-9wr7-w9x8","CGA-wmp9-crfp-mg8j","CGA-wr3m-88p2-m538","CGA-wrfr-rcf9-xwm8","CGA-ww2g-rxjg-vj2g","CGA-x3v6-534g-5j5m","CGA-x5fg-f8j2-c58f","CGA-x6vg-chvq-qxx2","CGA-xc3w-mf88-5v3c","CGA-xgmh-fhrc-rcm8","CGA-xqgq-fwpm-63v3","CGA-2hhv-ghcj-fww9","CGA-32jm-pf9m-c837","CGA-3hqh-6jq7-4wm3","CGA-558g-q9v2-9r57","CGA-5c9f-h93w-h36v","CGA-5wxv-g69x-7mv6","CGA-67h9-cgrj-3xh3","CGA-8c5m-xfj7-c8px","CGA-cj7m-mgw8-cc43","CGA-f4jp-r2hm-7mwr","CGA-fqmp-5c34-pmch","CGA-fw5w-wxc9-hcw9","CGA-jxfx-9vhg-j3w5","CGA-2hfm-f8xq-mjw8","CGA-2rcc-h2j3-jwhw","CGA-375w-gprf-qjmp","CGA-3h38-2grp-53q5","CGA-3xwc-9vjw-3q7j","CGA-4hhx-vg8r-46g6","CGA-5w54-w952-895p","CGA-9ccj-56rm-r969","CGA-9rg9-v67x-42m3","CGA-gg4w-fvhv-w34v","CGA-hjxg-frc3-89rp","CGA-q4pv-hm83-f2jq","CGA-r459-6ccm-7445","CGA-v666-hgxv-63j7","CGA-vxj2-6j76-75w7","CGA-w2g4-98q8-49v8","CGA-gpqc-hxqf-f5m7","CGA-qcj3-rchw-w3rh","CGA-v7mv-c9cg-mmrv","CGA-233c-gp85-5c44","CGA-6j5v-6qj4-gvg9","CGA-v9v8-qmjj-qpmw","CGA-w6wv-qr29-qxmh","CGA-2f46-cvj5-hqhw","CGA-58vv-jj58-v996","CGA-62fr-rw4c-wm82","CGA-fppf-vj5q-g2r2","CGA-g3rj-4phc-r8cg","CGA-mg7r-p5cj-h2f3","CGA-mq47-qgq8-47qv","CGA-pcgv-6chr-rhgx","CGA-q53q-pfj8-vmq8","CGA-q9gq-3wvr-5v8q","CGA-v6gr-2c7v-977h","CGA-5xvw-6g79-28vg","UBUNTU-CVE-2026-70162"],"status":"published","duplicateOf":null,"title":null,"description":"A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.\nThe update addresses the vulnerability by correcting how the .NET web application handles web requests.","dates":{"published":"2026-10-13T19:01:37.471Z","modified":"2026-10-19T23:53:11.757Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Nuget","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":5.6,"impact":6,"computed":true}]},"epss":{"probability":0.00768,"percentile":0.54791,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00768,"percentile":0.54791}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00768,"percentile":0.54791}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-405","name":"Asymmetric Resource Consumption (Amplification)","description":"The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is \"asymmetric.\"","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/405.html"}],"affected":[{"vendor":"chainguard","product":"actions-runner","name":"actions-runner","label":"actions-runner","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/actions-runner","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.338.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.338.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-dotnet-apidiff","name":"eco-dotnet-apidiff","label":"eco-dotnet-apidiff","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-dotnet-apidiff","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.1.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.1.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ilspycmd","name":"ilspycmd","label":"ilspycmd","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ilspycmd","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 11.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 11.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ilspycmd","name":"ilspycmd","label":"ilspycmd","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ilspycmd","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 11.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 11.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet7","name":"dotnet7","label":"dotnet7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.14","name":"Microsoft Visual Studio 2022 version 17.14","label":"microsoft visual studio 2022 version 17.14","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 17.14.0, < 17.14.42","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 17.14.0, < 17.14.42","eol":null,"hubHref":"/vendor/microsoft/microsoft_visual_studio_2022_version_1714"},{"vendor":"microsoft","product":"microsoft visual studio 2026 version 18.10","name":"Microsoft Visual Studio 2026 version 18.10","label":"microsoft visual studio 2026 version 18.10","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 18.10.0, < 18.10.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 18.10.0, < 18.10.4","eol":null,"hubHref":"/vendor/microsoft/microsoft_visual_studio_2026_version_1810"},{"vendor":"microsoft","product":"system.security.cryptography.pkcs","name":"System.Security.Cryptography.Pkcs","label":"system.security.cryptography.pkcs","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13","eol":null,"hubHref":"/vendor/microsoft/systemsecuritycryptographypkcs"},{"vendor":"NuGet","product":"System.Security.Cryptography.Pkcs","name":"System.Security.Cryptography.Pkcs","label":"System.Security.Cryptography.Pkcs","ecosystem":"NuGet","cpePart":null,"purl":"pkg:nuget/System.Security.Cryptography.Pkcs","purlType":"nuget","versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.0-preview.1, < 11.0.0-rc.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13 | ≥ 11.0.0-preview.1, < 11.0.0-rc.2 | ≥ 8.0.0, < 8.0.2 | ≥ 9.0.0, < 9.0.21","eol":null,"hubHref":null}],"affectedCount":29,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch","WEB","REPORT"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-2fmv-rv2c-59x7","label":"github.com/dotnet/runtime/security/advisories/GHSA-2fmv-rv2c-59x7","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/announcements/issues/454","label":"github.com/dotnet/announcements/issues/454","hostname":"github.com","tags":["WEB","REPORT"]},{"url":"https://github.com/dotnet/runtime/issues/135699","label":"github.com/dotnet/runtime/issues/135699","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/runtime","label":"github.com/dotnet/runtime","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70162","label":"nvd.nist.gov/vuln/detail/CVE-2026-70162","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-70162","label":"ubuntu.com/security/CVE-2026-70162","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-70162","label":"www.cve.org/CVERecord?id=CVE-2026-70162","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-october-2026-servicing-updates","label":"devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-october-2026-servicing-updates","hostname":"devblogs.microsoft.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-13T19:01:37.471Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-19T23:53:11.757Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:46:27.277Z","stale":false,"partial":false}}