OnlyPatch
.NET Core

CVE-2026-57108 — .NET Denial of Service Vulnerability

Important CVSS 7.5 2026-07 archive

Executive Summary

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

Overview

7.5
CVSS HIGH
Important
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Denial of Service
Released Jul 14 2026
Last Updated Jul 14 2026
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
None
INTEGRITY
None
AVAILABILITY
High
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 6.5

EPSS Score

No EPSS score available for this CVE.

View on FIRST.org

Affected Products

8 affected products
Product KB Article Severity Impact Restart Required
.NET 10.0 installed on Linux 5104034 (Security Update) Important Denial of Service Maybe
.NET 10.0 installed on Mac OS 5104034 (Security Update) Important Denial of Service Maybe
.NET 8.0 installed on Linux 5104032 (Security Update) Important Denial of Service Maybe
.NET 8.0 installed on Mac OS 5104032 (Security Update) Important Denial of Service Maybe
.NET 8.0 installed on Windows 5104032 (Security Update) Important Denial of Service Maybe
.NET 9.0 installed on Linux 5104033 (Security Update) Important Denial of Service Maybe
.NET 9.0 installed on Mac OS 5104033 (Security Update) Important Denial of Service Maybe
.NET 9.0 installed on Windows 5104033 (Security Update) Important Denial of Service Maybe

Patches

3 patches
Article Type Restart
5104034 Security Update Maybe
5104032 Security Update Maybe
5104033 Security Update Maybe

Known Exploits

Acknowledgments

41ae55e9310ff27fa6f26af4727e5590

On This Page