{"schemaVersion":3,"id":"CVE-2026-96960","aliases":["GHSA-7hqp-7c5m-4vq6","CGA-24w2-6458-3hh3","CGA-24w2-h8gm-qpmf","CGA-2rx5-4m9m-42mg","CGA-2w74-q8g9-p346","CGA-3937-88h9-j349","CGA-39w8-gg6v-gp5g","CGA-3g45-jrfh-2253","CGA-3mp2-42q6-gv2c","CGA-3mqq-ff7c-2xf7","CGA-3p6m-8p7v-xg9h","CGA-453h-7m89-3r65","CGA-4h5r-x7fh-h46c","CGA-4pgx-54w3-3fh2","CGA-53j9-55qh-hp64","CGA-53vp-g68v-w6cr","CGA-578p-2wc6-g2hv","CGA-599g-mp9x-w32p","CGA-5c84-prh9-74q8","CGA-5g2g-7mgp-xhcg","CGA-5pcp-xqc8-6p63","CGA-5vh4-c34j-fxpw","CGA-5xfc-9f4x-fx7w","CGA-6282-qj3g-wxgr","CGA-6642-598c-cjp9","CGA-67cj-p3fg-7vgq","CGA-68pg-5pr3-vw5w","CGA-6cxj-v72f-82x7","CGA-6hwr-6r3f-p28x","CGA-6j2h-9j2v-qphq","CGA-6jfh-v3j8-74r8","CGA-7366-vp6w-qvr4","CGA-768q-6v79-5c3j","CGA-76r2-3gmg-rpxx","CGA-7854-36w8-32gh","CGA-793g-g5vm-8qpm","CGA-83v7-qrv4-7h59","CGA-855g-pwf7-5rp7","CGA-869p-x8r6-w3x8","CGA-87cm-52r5-jghw","CGA-8p69-2h4x-7q93","CGA-8rp6-pvhh-32gg","CGA-8vc2-mm62-w2p6","CGA-9226-m9w2-7q3g","CGA-96j7-h976-3q7j","CGA-9cc9-jhpr-623q","CGA-9fc4-5qw9-wrvv","CGA-9gf8-wxm4-3hpg","CGA-9h2p-8cr6-q6rq","CGA-9mv6-qj82-crjp","CGA-9pc8-4vh7-fpvh","CGA-9qw7-gf23-q8f6","CGA-9rrr-qg6c-mm2x","CGA-c2g6-48xm-2c3p","CGA-ch78-72gx-4mqh","CGA-cx96-jm98-g68r","CGA-fgwx-6hm3-5jpg","CGA-fww4-mfpf-jgw2","CGA-gfr9-vpg2-crx7","CGA-gjmx-pfr4-r899","CGA-gjw2-mwc3-626r","CGA-gmcv-3rhx-wpfr","CGA-gqqr-5xvr-h5hq","CGA-gv5f-m4m3-h2m7","CGA-gx45-mp49-pg48","CGA-hq3m-rxxr-v2qr","CGA-j9c9-4q2h-mrqq","CGA-jqf2-xgfc-c5vp","CGA-jqhv-q6mc-7937","CGA-m42g-rr9h-rw8c","CGA-m97w-q37f-8hv9","CGA-m9cg-fhpc-rc5f","CGA-mw3r-vqf4-hmq8","CGA-p2fq-v3gw-hpm4","CGA-p9h4-j754-mqhg","CGA-pfhh-jx4j-cqvr","CGA-px56-fg96-5ww5","CGA-q82v-j7c3-5r5c","CGA-q8vp-mj9w-7cw4","CGA-qhwq-rr47-x48r","CGA-qjm7-xrf2-g8p8","CGA-qmrm-fpmp-4hvp","CGA-r24w-h282-768p","CGA-rcvh-3xvr-2f9c","CGA-rhr8-j62h-fvpx","CGA-rv2p-p7hf-f3wh","CGA-v28j-mgm6-pmgq","CGA-v2cw-xxqm-9jrq","CGA-v537-q89p-mc3p","CGA-vfc9-xv53-2xj4","CGA-vj5r-g3f5-9mmw","CGA-vqp9-wqx9-j358","CGA-whgq-wjc2-rx74","CGA-wp5q-4jjj-24w3","CGA-wpmf-cfqx-9hjr","CGA-x42c-mjcx-r2rf","CGA-x6q7-qx3w-877g","CGA-x7f4-mp2w-rf82","CGA-xhvg-rc72-q483","CGA-xq63-cw4m-rg3p","CGA-6589-9qrv-gx46","CGA-866m-m2wf-5jqw","CGA-fx46-234j-262r","CGA-j5xm-7gw9-gmwx","CGA-jgcg-63vr-f5g5","CGA-mx83-cj3j-h46p","CGA-qm39-6m9v-wvp9","CGA-r3pp-8fxm-26pj","CGA-w4pj-h8c3-3v7j","CGA-w4r9-rj92-32wf","CGA-3jx4-wjcq-j3pc","CGA-p524-r7w7-3q9w","CGA-vmv2-2vcg-4wh3","CGA-87c7-3xm6-vh7m","CGA-hp3v-5c3f-rvv5","CGA-hxxw-r52g-6gg7","CGA-wm77-mvmj-hccm"],"status":"published","duplicateOf":null,"title":null,"description":"Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.","dates":{"published":"2026-10-13T19:01:27.400Z","modified":"2026-10-16T23:25:35.414Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Nuget","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.01033,"percentile":0.6327,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.01056,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01056,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01056,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01033,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01033,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01033,"percentile":0.6327}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.01056,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01056,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01056,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01033,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01033,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01033,"percentile":0.6327}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-405","name":"Asymmetric Resource Consumption (Amplification)","description":"The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is \"asymmetric.\"","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/405.html"}],"affected":[{"vendor":"chainguard","product":"aspnet-9-targeting-pack","name":"aspnet-9-targeting-pack","label":"aspnet-9-targeting-pack","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/aspnet-9-targeting-pack","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"aspnet-9-targeting-pack","name":"aspnet-9-targeting-pack","label":"aspnet-9-targeting-pack","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/aspnet-9-targeting-pack","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-10-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-8-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 8.0.132-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 8.0.132-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-9-sdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.0.122-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.0.122-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.204-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.204-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.3","name":"dotnet-sdk-10.0.3","label":"dotnet-sdk-10.0.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.4","name":"dotnet-sdk-10.0.4","label":"dotnet-sdk-10.0.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.402-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.402-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 10.0.113-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 10.0.113-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/promitor","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.16.1-r1","eol":null,"hubHref":null},{"vendor":"microsoft","product":"microsoft .net framework 3.5","name":"Microsoft .NET Framework 3.5","label":"microsoft .net framework 3.5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.5.0, < 2.0.50727.9188 AND 3.0.30729.9171","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2","name":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","label":"microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_46247471472"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.7.2","name":"Microsoft .NET Framework 3.5 AND 4.7.2","label":"microsoft .net framework 3.5 and 4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_472"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8","name":"Microsoft .NET Framework 3.5 AND 4.8","label":"microsoft .net framework 3.5 and 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_48"},{"vendor":"microsoft","product":"microsoft .net framework 3.5 and 4.8.1","name":"Microsoft .NET Framework 3.5 AND 4.8.1","label":"microsoft .net framework 3.5 and 4.8.1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_35_and_481"},{"vendor":"microsoft","product":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","name":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","label":"microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.7.0, < 4.7.4150.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.7.0, < 4.7.4150.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_46247471472"},{"vendor":"microsoft","product":"microsoft .net framework 4.8","name":"Microsoft .NET Framework 4.8","label":"microsoft .net framework 4.8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0, < 4.8.4811.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0, < 4.8.4811.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_48"},{"vendor":"microsoft","product":"microsoft .net framework 4.8.1","name":"Microsoft .NET Framework 4.8.1","label":"microsoft .net framework 4.8.1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.8.0.0, < 4.8.9363.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.8.0.0, < 4.8.9363.0","eol":null,"hubHref":"/vendor/microsoft/microsoft_net_framework_481"},{"vendor":"microsoft","product":".net","name":".net","label":".net","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.0, < 8.0.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview1","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview2","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview3","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview4","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview5","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview6","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:preview7","noFixRecorded":false,"fixedIn":null},{"text":"11.0.0:rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0, < 8.0.5 | ≥ 9.0.0, < 9.0.21 | ≥ 10.0.0, < 10.0.13 | 11.0.0:preview1 | 11.0.0:preview2 | 11.0.0:preview3 | 11.0.0:preview4 | 11.0.0:preview5 | 11.0.0:preview6 | 11.0.0:preview7 | 11.0.0:rc1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"dotnet","label":"Microsoft .NET","category":"framework"}},"hubHref":"/vendor/microsoft/net"},{"vendor":"microsoft","product":".net_framework","name":".net framework","label":".net_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.8.1","noFixRecorded":false,"fixedIn":null},{"text":"4.8","noFixRecorded":false,"fixedIn":null},{"text":"4.6.2","noFixRecorded":false,"fixedIn":null},{"text":"4.7","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1","noFixRecorded":false,"fixedIn":null},{"text":"4.7.2","noFixRecorded":false,"fixedIn":null},{"text":"3.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.8.1 | 4.8 | 4.6.2 | 4.7 | 4.7.1 | 4.7.2 | 3.5","eol":null,"hubHref":"/vendor/microsoft/net_framework"},{"vendor":"microsoft","product":"system.security.cryptography.xml","name":"System.Security.Cryptography.Xml","label":"system.security.cryptography.xml","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13","eol":null,"hubHref":"/vendor/microsoft/systemsecuritycryptographyxml"},{"vendor":"NuGet","product":"System.Security.Cryptography.Xml","name":"System.Security.Cryptography.Xml","label":"System.Security.Cryptography.Xml","ecosystem":"NuGet","cpePart":null,"purl":"pkg:nuget/System.Security.Cryptography.Xml","purlType":"nuget","versions":[{"text":"≥ 10.0.0, < 10.0.13","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.0-preview.1, < 11.0.0-rc.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.13 | ≥ 11.0.0-preview.1, < 11.0.0-rc.2 | ≥ 8.0.0, < 8.0.5 | ≥ 9.0.0, < 9.0.21","eol":null,"hubHref":null}],"affectedCount":34,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-7hqp-7c5m-4vq6","label":"github.com/dotnet/runtime/security/advisories/GHSA-7hqp-7c5m-4vq6","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/announcements/issues/490","label":"github.com/dotnet/announcements/issues/490","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dotnet/runtime","label":"github.com/dotnet/runtime","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-13T19:01:27.400Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-16T23:25:35.414Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:08:15.233Z","stale":false,"partial":false}}