جزئیات آسیب‌پذیری
CVE-2026-33116
Microsoft NETMicrosoft .NET FrameworkMicrosoft .NET Framework AND
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (microsoft) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Microsoft | .NET 10.0 | 10.0.0 ≤ v < 10.0.6 | CVEProject cvelistV5 (CNA) |
| Microsoft | .NET 8.0 | 8.0 ≤ v < 8.0.26 | CVEProject cvelistV5 (CNA) |
| Microsoft | .NET 8.0 | 8.0.0 ≤ v < 8.0.26 | CVEProject cvelistV5 (CNA) |
| Microsoft | .NET 9.0 | 9.0.0 ≤ v < 9.0.15 | CVEProject cvelistV5 (CNA) |
| Microsoft | Microsoft .NET Framework 3.5 | 3.5.0 ≤ v < 2.0.50727.8982 & 3.0.30729.8976 | CVEProject cvelistV5 (CNA) |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 | 4.7.0 ≤ v < 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 | CVEProject cvelistV5 (CNA) |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 | 4.8.0 ≤ v < 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0 | CVEProject cvelistV5 (CNA) |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 | 4.8.1 ≤ v < 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 | CVEProject cvelistV5 (CNA) |
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | 4.7.0 ≤ v < 4.8.4801.0 | CVEProject cvelistV5 (CNA) |
| Microsoft | Microsoft .NET Framework 4.8 | 4.8.0 ≤ v < 4.8.4801.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۱- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116 vendor-advisorypatch
- https://access.redhat.com/security/cve/CVE-2026-33116 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2457741 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:13281 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13280 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8467 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8470 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8472 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8473 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8468 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8475 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13693 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13283 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13282 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8471 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8469 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8474 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9077 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9080 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9205 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۲۵
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۲۳
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- microsoft
پیش‌بینی بهره‌برداری (EPSS)
۲٫۱۴٪
احتمال بهره‌برداری در ۳۰ روز
۸۲٫۱٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')
- CWE-400Uncontrolled Resource Consumption
- CWE-20Improper Input Validation
- CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')