CVE-2026-23666

No fix known EPSS 1%CVSS 7.5

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

Published 2026-04-14 · CVE record · OSV

Products: Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images