← CVE Intelligence

CVE-2026-33116

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / .NET 10.0affected 10.0.0 before 10.0.6
Microsoft / .NET 8.0affected 8.0 before 8.0.26
Microsoft / .NET 8.0affected 8.0.0 before 8.0.26
Microsoft / .NET 9.0affected 9.0.0 before 9.0.15
Microsoft / Microsoft .NET Framework 3.5affected 3.5.0 before 2.0.50727.8982 & 3.0.30729.8976
Microsoft / Microsoft .NET Framework 3.5 AND 4.7.2affected 4.7.0 before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8affected 4.8.0 before 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8.1affected 4.8.1 before 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
Microsoft / Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2affected 4.7.0 before 4.8.4801.0
Microsoft / Microsoft .NET Framework 4.8affected 4.8.0 before 4.8.4801.0

CWE

CWE-835, CWE-400, CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in .NET. A remote attacker could exploit this vulnerability by crafting a malicious XML document that triggers an infinite recursion within the XmlDecryptionTransform component. This could lead to a Denial of Service (DoS), making the affected system unresponsive.