CVE-2026-26127
High · 7.5CVSS
7.5
EPSS
1.2%
Published
Mar 10, 2026
CISA due date
—
The record
Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | dotnet-bootstrap-9 | 0 | 9.0.115-r0 |
| Wolfi | dotnet-bootstrap-9 | 0 | 9.0.115-r0 |
Related vulnerabilities
- CVE-2026-26130 Allocation of resources without limits or throttling in ASP.NET Core allows an… Also affects dotnet-bootstrap-9
- CVE-2025-55315 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Also affects dotnet-bootstrap-9
- CVE-2024-43498 .NET Remote Code Execution Vulnerability Also affects dotnet-bootstrap-9
- CVE-2024-43499 .NET Denial of Service Vulnerability Also affects dotnet-bootstrap-9
- CVE-2026-92824 A flaw was found in libmodulemd. CWE-125
- CVE-2026-114038 A flaw was found in device-mapper-multipath. CWE-125
- CVE-2026-112896 Pillow is a Python imaging library. CWE-125
- CVE-2026-112278 rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in… CWE-125