CVE-2026-33116HighCVSS 7.5

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Published
June 2, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2026-33116 →

📋 Description

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

🎯 Affected products58

  • .NET 10.0 installed on Linux
  • .NET 10.0 installed on Mac OS
  • .NET 8.0
  • .NET 8.0 installed on Linux
  • .NET 8.0 installed on Mac OS
  • .NET 8.0 installed on Windows
  • .NET 9.0 installed on Linux
  • .NET 9.0 installed on Mac OS
  • .NET 9.0 installed on Windows
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems
  • +28 more not shown

✅ Remediation

KB5086095 (Security Update) — fixed build 10.0.6 KB5086096 (Security Update) — fixed build 8.0.26 KB5086097 (Security Update) — fixed build 9.0.15 KB5082411 (Security Update) — fixed build 4.8.4801.0 KB5082403 (Security Update) — fixed build 4.8.4801.0 KB5082414 (Security Update) — fixed build 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0 KB5082427 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0 KB5082426 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0 KB5082413 (Security Update) — fixed build 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 KB5082400 (Security Update) — fixed build 4.8.4801.0 KB5082402 (Security Update) — fixed build 4.7.4141.0 KB5082425 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 KB5082419 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 KB5082424 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 KB5082417 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 KB5082418 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 KB5082420 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0 KB5082398 (Security Update) — fixed build 2.0.50727.8982 & 3.0.30729.8976 KB5082421 (Security Update) — fixed build 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0

🔗 References (39)