{"schemaVersion":3,"id":"CVE-2026-96959","aliases":["GHSA-c399-9853-6jmj","CGA-2353-93jm-r2mp","CGA-278h-3v7c-564f","CGA-2qgv-xq52-whwv","CGA-2r69-gx6w-84wp","CGA-2wqh-5fc9-qcrx","CGA-2xv6-8456-ff73","CGA-3pcx-6cvw-8mpq","CGA-3pjm-hcc8-8m8m","CGA-4822-jccx-m9v9","CGA-4c76-xfg3-x2gv","CGA-4hwg-rccj-f358","CGA-4p3c-jhqw-vg89","CGA-4rx4-g529-5g52","CGA-52m9-358m-q983","CGA-54hr-v95w-ccfr","CGA-5c75-hfg7-55vc","CGA-5w6h-g4v4-3cv2","CGA-6xq3-65qc-w6mg","CGA-72m4-5r73-8h52","CGA-7357-f2gx-vrq9","CGA-772m-qgqw-2mjw","CGA-7cvx-qcjf-6rc9","CGA-7mcp-r83m-vphc","CGA-7pcx-5rvg-4q22","CGA-7q5w-fj79-6ggg","CGA-868g-63px-2fj6","CGA-875m-4rp9-vf47","CGA-8c8w-6496-v77x","CGA-8fhx-wxfq-5q63","CGA-8m78-448v-g44g","CGA-8m79-22jv-qjgj","CGA-8qwr-vc53-xm5r","CGA-8w6x-fj4x-xxj7","CGA-8wwm-vw36-xgpc","CGA-96vw-w8qr-4rf5","CGA-99x8-8v3w-2hqm","CGA-9jmg-9r56-mvgr","CGA-c499-gwmh-3838","CGA-c58x-5qmw-77m3","CGA-c5pv-49v7-ghwx","CGA-c6wj-qvm6-3fx8","CGA-f7mc-j4gv-m62x","CGA-f7q5-35wx-x4rw","CGA-fh3r-88f6-2f5r","CGA-fj53-h425-3fp8","CGA-frvh-j78x-h67p","CGA-g9hc-fmx2-fpvq","CGA-gfwv-45cj-j7xf","CGA-ghwr-qgq2-6v7q","CGA-gjmr-qrjh-32x3","CGA-gwpg-8w9m-h2hh","CGA-h6m7-mg85-f686","CGA-hj2g-3gf6-8xrc","CGA-hmmf-qqmj-xhcm","CGA-hv43-84hf-545v","CGA-j4hg-4xp2-3m7f","CGA-jgg3-hw97-6gcr","CGA-jjgv-h6j2-6cpv","CGA-m6pj-h44c-pgvf","CGA-mfmf-vq3f-7g9m","CGA-mrcc-qg6w-5c7h","CGA-mrmq-2rjg-2v3h","CGA-mwcw-jqvq-vgvf","CGA-p3h6-x926-w5cw","CGA-p5gr-pg7f-824j","CGA-p6qx-vrmc-wr25","CGA-pj7f-h8r4-22x3","CGA-pmqh-j43v-8cxp","CGA-pqhw-r6mq-j45f","CGA-pxf6-f2m4-fmr7","CGA-q279-3rmq-q47m","CGA-q44h-9wwr-m9r4","CGA-qhwf-xvpf-qxfh","CGA-qw3q-79w9-92pg","CGA-qxq2-497j-347x","CGA-r574-6f2j-8vhg","CGA-r8wj-6f27-jc58","CGA-rg2w-r48w-m3q6","CGA-rjpw-pj25-48xp","CGA-rvfm-mr75-r37v","CGA-rx3q-g6xw-q5xc","CGA-v3wg-6ch6-8j76","CGA-vmpr-3mvm-35r3","CGA-wc29-w6q4-2654","CGA-wf2m-x5rg-3q87","CGA-wg32-xccw-4xv2","CGA-wp3w-4283-cxq6","CGA-x6hf-g6g2-6q6q","CGA-x8p7-cx29-382v","CGA-x98p-4p68-2c79","CGA-xjxc-jmvx-wrh8","CGA-xrr9-3v6g-76h8","CGA-xxh8-prfq-fh2v","CGA-2p6r-g744-5rj7","CGA-454c-h7mw-26r5","CGA-5gp9-f9jm-w47m","CGA-5x6m-gj55-f3w8","CGA-78rj-w386-cp7c","CGA-82xc-xqgp-h6c8","CGA-9g25-h4hf-8j33","CGA-9r2h-hhw2-jxw6","CGA-cxv7-4xrw-hj92","CGA-hf66-8p9g-jrjj","CGA-pr8c-8vw3-rpp7","CGA-prvh-c642-jg6w","CGA-v74q-655j-v957","CGA-xr8v-pfjf-m774","CGA-g6v7-f7jq-m935","CGA-j25g-h224-5jxf","CGA-j499-gq7r-m39c","CGA-7hp2-9v4f-pgj8","CGA-c4cv-4rjc-9p85","CGA-cq49-pq8q-9mhh","CGA-rpmq-qxjw-p8jf","CGA-x4g2-gvxw-2hwx","CGA-x69v-hf39-rqv3","BIT-dotnet-2026-96959","BIT-dotnet-sdk-2026-96959"],"status":"published","duplicateOf":null,"title":null,"description":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","dates":{"published":"2026-10-13T19:01:27.293Z","modified":"2026-10-19T19:41:16.103Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Nuget","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.0075,"percentile":0.54121,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0075,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0075,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0075,"percentile":0.54121}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00766,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0075,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0075,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0075,"percentile":0.54121}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"chainguard","product":"aspnet-9-targeting-pack","name":"aspnet-9-targeting-pack","label":"aspnet-9-targeting-pack","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/aspnet-9-targeting-pack","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"aspnet-9-targeting-pack","name":"aspnet-9-targeting-pack","label":"aspnet-9-targeting-pack","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/aspnet-9-targeting-pack","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"microsoft","product":"microsoft .net framework 3.5","name":"Microsoft .NET Framework 3.5","label":"microsoft .net framework 3.5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2","name":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","label":"microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_46247471472"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.7.2","name":"Microsoft .NET Framework 3.5 AND 4.7.2","label":"microsoft .net framework 3.5 and 4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_472"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8","name":"Microsoft .NET Framework 3.5 AND 4.8","label":"microsoft .net framework 3.5 and 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_48"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8.1","name":"Microsoft .NET Framework 3.5 AND 4.8.1","label":"microsoft .net framework 3.5 and 4.8.1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_481"},{"vendor":"microsoft","product":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","name":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","label":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_46247471472"},{"vendor":"microsoft","product":"microsoft .net framework 4.8","name":"Microsoft .NET Framework 4.8","label":"microsoft .net framework 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 4.8.4811.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 4.8.4811.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_48"},{"vendor":"microsoft","product":"microsoft .net framework 4.8.1","name":"Microsoft .NET Framework 4.8.1","label":"microsoft .net framework 4.8.1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0.0, < 4.8.9363.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0.0, < 4.8.9363.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_481"},{"vendor":"microsoft","product":".net","name":".net","label":".net","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.0, < 8.0.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview1","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview2","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview3","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview4","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview5","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview6","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview7","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0, < 8.0.5 | ≥ 9.0.0, < 9.0.21 | ≥ 10.0.0, < 10.0.13 | 11.0.0:preview1 | 11.0.0:preview2 | 11.0.0:preview3 | 11.0.0:preview4 | 11.0.0:preview5 | 11.0.0:preview6 | 11.0.0:preview7 | 11.0.0:rc1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"dotnet","label":"Microsoft .NET","category":"framework"}},"hubHref":"/vendor/microsoft/net"},{"vendor":"microsoft","product":".net_framework","name":".net framework","label":".net_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.8.1","noFixRecorded":false,"fixedIn":null},{"text":"4.8","noFixRecorded":false,"fixedIn":null},{"text":"4.6.2","noFixRecorded":false,"fixedIn":null},{"text":"4.7","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1","noFixRecorded":false,"fixedIn":null},{"text":"4.7.2","noFixRecorded":false,"fixedIn":null},{"text":"3.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.8.1 | 4.8 | 4.6.2 | 4.7 | 4.7.1 | 4.7.2 | 3.5","eol":null,"hubHref":"/vendor/microsoft/net_framework"},{"vendor":"microsoft","product":"system.security.cryptography.xml","name":"System.Security.Cryptography.Xml","label":"system.security.cryptography.xml","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13","eol":null,"hubHref":"/vendor/microsoft/systemsecuritycryptographyxml"},{"vendor":"NuGet","product":"System.Security.Cryptography.Xml","name":"System.Security.Cryptography.Xml","label":"System.Security.Cryptography.Xml","ecosystem":"NuGet","cpePart":null,"purl":"pkg:nuget/System.Security.Cryptography.Xml","purlType":"nuget","versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.0-preview.1, < 11.0.0-rc.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13 | ≥ 11.0.0-preview.1, < 11.0.0-rc.2 | ≥ 8.0.0, < 8.0.5 | ≥ 9.0.0, < 9.0.21","eol":null,"hubHref":null}],"affectedCount":34,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch","WEB"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-c399-9853-6jmj","label":"github.com/dotnet/runtime/security/advisories/GHSA-c399-9853-6jmj","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/announcements/issues/489","label":"github.com/dotnet/announcements/issues/489","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/runtime/issues/135710","label":"github.com/dotnet/runtime/issues/135710","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/runtime","label":"github.com/dotnet/runtime","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96959","label":"nvd.nist.gov/vuln/detail/CVE-2026-96959","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-13T19:01:27.293Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-19T19:41:16.103Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:06:47.475Z","stale":false,"partial":false}}