CVE-2026-109468

No fix known EPSS <1%CVSS 7.5

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Published 2026-10-15 · CVE record · OSV

Products: Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10, Microsoft System.Formats.Cbor