{"schemaVersion":3,"id":"CVE-2026-84008","aliases":["GHSA-846f-f764-76mx","CGA-252q-g9hx-4382","CGA-2crr-6mmh-fw78","CGA-2cvg-777v-w728","CGA-2g7f-93qf-g697","CGA-2qhp-59rf-rf3v","CGA-2v76-63g7-jqmw","CGA-3c62-gmcc-c6hf","CGA-3mjp-92fp-9xpv","CGA-43w3-p6pm-jx5r","CGA-45pw-cwfr-mghf","CGA-4987-h66p-m39c","CGA-4c72-cvvq-fj4m","CGA-4c85-3vgr-m728","CGA-4hj8-65cf-jrfv","CGA-4wwg-qh54-h4cp","CGA-4x77-j4pm-7xcr","CGA-53wc-7wx2-4f2r","CGA-54xq-68c9-8xcj","CGA-56fg-322f-2frc","CGA-5jr5-cjvr-542j","CGA-5mh3-89x9-p2cc","CGA-6c2x-563g-3r87","CGA-6gp9-mmhw-27f4","CGA-6p44-79fr-882w","CGA-6q6c-w74c-qf84","CGA-74j5-hcpp-2362","CGA-75vv-766x-96rc","CGA-766w-jj8p-5jgc","CGA-77j9-mxcw-m2pj","CGA-7c4h-765j-664r","CGA-7q34-g5cp-6h8x","CGA-7wmg-9pfp-62cj","CGA-7x7q-rr4f-ph4r","CGA-7x7w-vmgg-gw2g","CGA-828r-p36f-w7q6","CGA-83jq-wwrx-8hwr","CGA-8ch5-57w9-9r2p","CGA-8fjj-fxp5-r8ww","CGA-8q63-9454-39c5","CGA-8q9j-rc48-x52w","CGA-963h-6f8v-rgmc","CGA-96qm-vcgg-wq53","CGA-973m-jjq3-cxc7","CGA-97fg-mr33-3qpq","CGA-997f-h3hq-7wv5","CGA-9p89-qxm7-92v2","CGA-9ppg-h54h-p68h","CGA-c5wp-3rr7-5ch2","CGA-cf76-v3c2-rj8f","CGA-cg54-3wmm-9vxj","CGA-cggf-ghmp-h496","CGA-cr5j-2xjf-92vc","CGA-fgfg-wp5w-2phm","CGA-fq26-r6vr-v37q","CGA-fqmm-vrxv-9p98","CGA-fvxw-6x89-55jq","CGA-g42m-rqw6-cpjq","CGA-gf8f-mj85-7g63","CGA-gfmj-m5f4-qxcm","CGA-gfq4-cf5x-5pq5","CGA-ggrg-96pm-9cfx","CGA-gm6x-mvp2-vcvf","CGA-gpxp-m2g3-7m56","CGA-gr25-m7rq-j788","CGA-gv3h-rqqc-r584","CGA-h65c-c3j3-v4qr","CGA-h97p-vm4w-m67x","CGA-hwqf-66mp-ghx9","CGA-j238-9f6f-g2w3","CGA-j378-cfqx-q2g9","CGA-j6v8-53cg-wxp7","CGA-j7g6-5m87-wgw9","CGA-jcwp-gr78-4423","CGA-jg2g-9j2h-cpgc","CGA-jhhw-jpp4-jx57","CGA-jj28-6mvq-xrh9","CGA-jwf7-623f-vxrg","CGA-jwvm-qrgq-cpgc","CGA-m62c-7wp5-8mh5","CGA-m8hh-x75j-7rcp","CGA-mmf3-j3q5-p7v2","CGA-mmfp-qmvx-7g72","CGA-mqxj-jh39-h42m","CGA-mrxf-5x6r-489p","CGA-p3f2-rfph-hwxv","CGA-p642-2gh9-mrqp","CGA-p6xr-8grc-3rxj","CGA-pc6j-p27c-4w7w","CGA-pmf3-9j3w-4r6r","CGA-pqjf-x2r3-f6gg","CGA-pqmc-4wrm-jqxw","CGA-q2xp-5g3m-g658","CGA-q8cr-9w3w-rjmx","CGA-qg4w-cpjf-79c2","CGA-qgcp-w6xj-62hj","CGA-qhf6-wh43-qjc9","CGA-qqqh-5954-qf8p","CGA-qvj5-6q6x-p4q9","CGA-r7jm-vhph-r8cp","CGA-r839-fr83-9wfw","CGA-rcr7-xgq3-4r3v","CGA-rpqg-9qhh-2243","CGA-v57c-q5hh-pg6g","CGA-v8g2-qjw7-93q2","CGA-vcfp-hqq8-7mf2","CGA-vfvc-j5w4-89xx","CGA-vmgw-f799-82f8","CGA-w4r2-5q4g-r9g7","CGA-w9jm-74qg-jpv3","CGA-wx87-fwvq-cxph","CGA-x275-f6j5-q6r9","CGA-xfj5-p2vv-6mwg","CGA-xj4g-h98g-qvh7","CGA-xjjj-wr2c-pm6f","CGA-xrrx-x3r5-f5vg","CGA-xxhp-6qm3-x2cq","CGA-2w88-5jjj-pp58","CGA-6w7p-r97w-6ch4","CGA-7w57-hcqv-mwj2","CGA-8p4w-8r2r-c66h","CGA-9q53-5fmm-x5v4","CGA-cjgw-hmxw-mp8f","CGA-p8p2-mp83-653h","CGA-q6g2-5cw4-77j4","CGA-r5j6-7pgr-h3f3","CGA-rqx2-995w-mrx8","CGA-wjhq-r8jq-7xxp","CGA-wvhf-23rg-m8w7","CGA-xjvf-99c3-q4qv","CGA-3rr5-2cqg-fj3h","CGA-44wp-6rxj-592h","CGA-6m5c-2953-rjxf","CGA-77q6-x24m-25gx","CGA-gcmf-qw43-9338","CGA-j857-3h8q-q558","CGA-mx3p-pgv9-c8h8","CGA-pqq7-vgfm-4wr2","CGA-qqrv-jp54-2q4r","CGA-4975-9552-9p58","CGA-68v3-767g-jgw2","CGA-cq43-445m-fqx4","CGA-gg6p-mx56-h6qw","CGA-h65x-76ch-9pmj","CGA-9c2m-gwjm-33q6","CGA-gwgj-7fc8-2x79","CGA-pm5f-6xjg-92xj","CGA-22cx-c559-4xvf","CGA-2987-8mw5-9fr4","CGA-43wq-7cg7-j8wh","CGA-6ff5-q4pv-8hhp","CGA-94p5-wf72-25v8","CGA-fv3r-gcx6-657v","CGA-hfgw-rgx9-jwxf","CGA-3cwq-q526-5mh2","CGA-h7rj-6cgx-2gq2","UBUNTU-CVE-2026-84008"],"status":"published","duplicateOf":null,"title":null,"description":"Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.","dates":{"published":"2026-10-13T19:01:15.897Z","modified":"2026-10-19T23:51:24.247Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Nuget","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.00766,"percentile":0.54757,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00766,"percentile":0.54757}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00766,"percentile":0.54757}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-407","name":"Inefficient Algorithmic Complexity","description":"An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/407.html"}],"affected":[{"vendor":"chainguard","product":"actions-runner","name":"actions-runner","label":"actions-runner","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/actions-runner","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.338.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.338.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-dotnet-apidiff","name":"eco-dotnet-apidiff","label":"eco-dotnet-apidiff","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-dotnet-apidiff","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.1.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.1.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ilspycmd","name":"ilspycmd","label":"ilspycmd","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ilspycmd","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 11.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 11.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ilspycmd","name":"ilspycmd","label":"ilspycmd","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ilspycmd","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 11.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 11.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet10","name":"dotnet10","label":"dotnet10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet11","name":"dotnet11","label":"dotnet11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet6","name":"dotnet6","label":"dotnet6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet7","name":"dotnet7","label":"dotnet7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet8","name":"dotnet8","label":"dotnet8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"microsoft","product":"microsoft .net framework 3.5","name":"Microsoft .NET Framework 3.5","label":"microsoft .net framework 3.5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2","name":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","label":"microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_46247471472"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.7.2","name":"Microsoft .NET Framework 3.5 AND 4.7.2","label":"microsoft .net framework 3.5 and 4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_472"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8","name":"Microsoft .NET Framework 3.5 AND 4.8","label":"microsoft .net framework 3.5 and 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_48"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8.1","name":"Microsoft .NET Framework 3.5 AND 4.8.1","label":"microsoft .net framework 3.5 and 4.8.1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_481"},{"vendor":"microsoft","product":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","name":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","label":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_46247471472"},{"vendor":"microsoft","product":"microsoft .net framework 4.8","name":"Microsoft .NET Framework 4.8","label":"microsoft .net framework 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 4.8.4811.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 4.8.4811.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_48"},{"vendor":"microsoft","product":"microsoft .net framework 4.8.1","name":"Microsoft .NET Framework 4.8.1","label":"microsoft .net framework 4.8.1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0.0, < 4.8.9363.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0.0, < 4.8.9363.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_481"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.14","name":"Microsoft Visual Studio 2022 version 17.14","label":"microsoft visual studio 2022 version 17.14","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 17.14.0, < 17.14.42","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 17.14.0, < 17.14.42","eol":null,"hubHref":"/vendor/microsoft/microsoft_visual_studio_2022_version_1714"},{"vendor":"microsoft","product":"microsoft visual studio 2026 version 18.10","name":"Microsoft Visual Studio 2026 version 18.10","label":"microsoft visual studio 2026 version 18.10","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 18.10.0, < 18.10.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 18.10.0, < 18.10.4","eol":null,"hubHref":"/vendor/microsoft/microsoft_visual_studio_2026_version_1810"},{"vendor":"microsoft","product":"system.security.cryptography.pkcs","name":"System.Security.Cryptography.Pkcs","label":"system.security.cryptography.pkcs","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13","eol":null,"hubHref":"/vendor/microsoft/systemsecuritycryptographypkcs"},{"vendor":"NuGet","product":"System.Security.Cryptography.Pkcs","name":"System.Security.Cryptography.Pkcs","label":"System.Security.Cryptography.Pkcs","ecosystem":"NuGet","cpePart":null,"purl":"pkg:nuget/System.Security.Cryptography.Pkcs","purlType":"nuget","versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.0-preview.1, < 11.0.0-rc.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13 | ≥ 11.0.0-preview.1, < 11.0.0-rc.2 | ≥ 8.0.0, < 8.0.2 | ≥ 9.0.0, < 9.0.21","eol":null,"hubHref":null}],"affectedCount":41,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch","WEB","REPORT"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-846f-f764-76mx","label":"github.com/dotnet/runtime/security/advisories/GHSA-846f-f764-76mx","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/announcements/issues/468","label":"github.com/dotnet/announcements/issues/468","hostname":"github.com","tags":["WEB","REPORT"]},{"url":"https://github.com/dotnet/runtime/issues/135703","label":"github.com/dotnet/runtime/issues/135703","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/runtime","label":"github.com/dotnet/runtime","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84008","label":"nvd.nist.gov/vuln/detail/CVE-2026-84008","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-84008","label":"ubuntu.com/security/CVE-2026-84008","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84008","label":"www.cve.org/CVERecord?id=CVE-2026-84008","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-october-2026-servicing-updates","label":"devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-october-2026-servicing-updates","hostname":"devblogs.microsoft.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-13T19:01:15.897Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-19T23:51:24.247Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:15:55.450Z","stale":false,"partial":false}}