Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-58280

Fixed in a distro release EPSS 1%CVSS 7.5

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft .NET 10.0 runtime, Microsoft .NET 11.0 runtime, Microsoft .NET 8.0 runtime, Microsoft .NET 9.0 runtime, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8, Microsoft .NET Framework 4.8.1, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.NETCore.App.Runtime.linux-arm10.0.13
NuGetMicrosoft.NETCore.App.Runtime.linux-arm8.0.32
NuGetMicrosoft.NETCore.App.Runtime.linux-arm9.0.21
NuGetMicrosoft.NETCore.App.Runtime.linux-arm11.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.linux-arm6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.linux-arm649.0.21
NuGetMicrosoft.NETCore.App.Runtime.linux-arm648.0.32
NuGetMicrosoft.NETCore.App.Runtime.linux-arm6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm9.0.21
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm10.0.13
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm8.0.32
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm11.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm649.0.21
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm648.0.32
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-x6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-x6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-x649.0.21
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-x648.0.32
NuGetMicrosoft.NETCore.App.Runtime.linux-x648.0.32
NuGetMicrosoft.NETCore.App.Runtime.linux-x6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.linux-x649.0.21
NuGetMicrosoft.NETCore.App.Runtime.linux-x6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.osx-arm648.0.32
NuGetMicrosoft.NETCore.App.Runtime.osx-arm6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.osx-arm6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.osx-arm649.0.21
NuGetMicrosoft.NETCore.App.Runtime.osx-x648.0.32
NuGetMicrosoft.NETCore.App.Runtime.osx-x6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.osx-x6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.osx-x649.0.21
NuGetMicrosoft.NETCore.App.Runtime.win-arm10.0.13
NuGetMicrosoft.NETCore.App.Runtime.win-arm8.0.32
NuGetMicrosoft.NETCore.App.Runtime.win-arm11.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.win-arm9.0.21
NuGetMicrosoft.NETCore.App.Runtime.win-arm649.0.21
NuGetMicrosoft.NETCore.App.Runtime.win-arm6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.win-arm648.0.32
NuGetMicrosoft.NETCore.App.Runtime.win-arm6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.win-x649.0.21
NuGetMicrosoft.NETCore.App.Runtime.win-x6410.0.13
NuGetMicrosoft.NETCore.App.Runtime.win-x648.0.32
NuGetMicrosoft.NETCore.App.Runtime.win-x6411.0.0-rc.2
NuGetMicrosoft.NETCore.App.Runtime.win-x8610.0.13
NuGetMicrosoft.NETCore.App.Runtime.win-x869.0.21
NuGetMicrosoft.NETCore.App.Runtime.win-x868.0.32
NuGetMicrosoft.NETCore.App.Runtime.win-x8611.0.0-rc.2

Distro releases

ReleasePackageFixed in
AlmaLinux 10aspnetcore-runtime-10.010.0.13-1.el10_2
AlmaLinux 10aspnetcore-runtime-8.08.0.32-1.el10_2
AlmaLinux 10aspnetcore-runtime-9.09.0.21-1.el10_2
AlmaLinux 10aspnetcore-runtime-dbg-10.010.0.13-1.el10_2
AlmaLinux 10aspnetcore-runtime-dbg-8.08.0.32-1.el10_2
AlmaLinux 10aspnetcore-runtime-dbg-9.09.0.21-1.el10_2
AlmaLinux 10aspnetcore-targeting-pack-10.010.0.13-1.el10_2
AlmaLinux 10aspnetcore-targeting-pack-8.08.0.32-1.el10_2
AlmaLinux 10aspnetcore-targeting-pack-9.09.0.21-1.el10_2
AlmaLinux 10dotnet-apphost-pack-10.010.0.13-1.el10_2
AlmaLinux 10dotnet-apphost-pack-8.08.0.32-1.el10_2
AlmaLinux 10dotnet-apphost-pack-9.09.0.21-1.el10_2
AlmaLinux 10dotnet-host10.0.13-1.el10_2
AlmaLinux 10dotnet-hostfxr-10.010.0.13-1.el10_2
AlmaLinux 10dotnet-hostfxr-8.08.0.32-1.el10_2
AlmaLinux 10dotnet-hostfxr-9.09.0.21-1.el10_2
AlmaLinux 10dotnet-runtime-10.010.0.13-1.el10_2
AlmaLinux 10dotnet-runtime-8.08.0.32-1.el10_2
AlmaLinux 10dotnet-runtime-9.09.0.21-1.el10_2
AlmaLinux 10dotnet-runtime-dbg-10.010.0.13-1.el10_2
AlmaLinux 10dotnet-runtime-dbg-8.08.0.32-1.el10_2
AlmaLinux 10dotnet-runtime-dbg-9.09.0.21-1.el10_2
AlmaLinux 10dotnet-sdk-10.010.0.113-1.el10_2
AlmaLinux 10dotnet-sdk-10.0-source-built-artifacts10.0.113-1.el10_2
AlmaLinux 10dotnet-sdk-8.08.0.132-1.el10_2
AlmaLinux 10dotnet-sdk-8.0-source-built-artifacts8.0.132-1.el10_2
AlmaLinux 10dotnet-sdk-9.09.0.122-1.el10_2
AlmaLinux 10dotnet-sdk-9.0-source-built-artifacts9.0.122-1.el10_2
AlmaLinux 10dotnet-sdk-aot-10.010.0.113-1.el10_2
AlmaLinux 10dotnet-sdk-aot-9.09.0.122-1.el10_2
AlmaLinux 10dotnet-sdk-dbg-10.010.0.113-1.el10_2
AlmaLinux 10dotnet-sdk-dbg-8.08.0.132-1.el10_2
AlmaLinux 10dotnet-sdk-dbg-9.09.0.122-1.el10_2
AlmaLinux 10dotnet-targeting-pack-10.010.0.13-1.el10_2
AlmaLinux 10dotnet-targeting-pack-8.08.0.32-1.el10_2
AlmaLinux 10dotnet-targeting-pack-9.09.0.21-1.el10_2
AlmaLinux 10dotnet-templates-10.010.0.113-1.el10_2
AlmaLinux 10dotnet-templates-8.08.0.132-1.el10_2
AlmaLinux 10dotnet-templates-9.09.0.122-1.el10_2
AlmaLinux 10netstandard-targeting-pack-2.19.0.122-1.el10_2
AlmaLinux 8aspnetcore-runtime-10.010.0.13-1.el8_10
AlmaLinux 8aspnetcore-runtime-8.08.0.32-2.el8_10
AlmaLinux 8aspnetcore-runtime-9.09.0.21-1.el8_10
AlmaLinux 8aspnetcore-runtime-dbg-10.010.0.13-1.el8_10
AlmaLinux 8aspnetcore-runtime-dbg-8.08.0.32-2.el8_10
AlmaLinux 8aspnetcore-runtime-dbg-9.09.0.21-1.el8_10
AlmaLinux 8aspnetcore-targeting-pack-10.010.0.13-1.el8_10
AlmaLinux 8aspnetcore-targeting-pack-8.08.0.32-2.el8_10
AlmaLinux 8aspnetcore-targeting-pack-9.09.0.21-1.el8_10
AlmaLinux 8dotnet10.0.113-1.el8_10
AlmaLinux 8dotnet-apphost-pack-10.010.0.13-1.el8_10
AlmaLinux 8dotnet-apphost-pack-8.08.0.32-2.el8_10
AlmaLinux 8dotnet-apphost-pack-9.09.0.21-1.el8_10
AlmaLinux 8dotnet-hostfxr-10.010.0.13-1.el8_10
AlmaLinux 8dotnet-hostfxr-8.08.0.32-2.el8_10
AlmaLinux 8dotnet-hostfxr-9.09.0.21-1.el8_10
AlmaLinux 8dotnet-runtime-10.010.0.13-1.el8_10
AlmaLinux 8dotnet-runtime-8.08.0.32-2.el8_10
AlmaLinux 8dotnet-runtime-9.09.0.21-1.el8_10
AlmaLinux 8dotnet-runtime-dbg-10.010.0.13-1.el8_10
AlmaLinux 8dotnet-runtime-dbg-8.08.0.32-2.el8_10
AlmaLinux 8dotnet-runtime-dbg-9.09.0.21-1.el8_10
AlmaLinux 8dotnet-sdk-10.010.0.113-1.el8_10
AlmaLinux 8dotnet-sdk-10.0-source-built-artifacts10.0.113-1.el8_10
AlmaLinux 8dotnet-sdk-8.08.0.132-2.el8_10
AlmaLinux 8dotnet-sdk-8.0-source-built-artifacts8.0.132-2.el8_10
AlmaLinux 8dotnet-sdk-9.09.0.122-1.el8_10
AlmaLinux 8dotnet-sdk-9.0-source-built-artifacts9.0.122-1.el8_10
AlmaLinux 8dotnet-sdk-aot-10.010.0.113-1.el8_10
AlmaLinux 8dotnet-sdk-aot-9.09.0.122-1.el8_10
AlmaLinux 8dotnet-sdk-dbg-10.010.0.113-1.el8_10
AlmaLinux 8dotnet-sdk-dbg-8.08.0.132-2.el8_10
AlmaLinux 8dotnet-sdk-dbg-9.09.0.122-1.el8_10
AlmaLinux 8dotnet-targeting-pack-10.010.0.13-1.el8_10
AlmaLinux 8dotnet-targeting-pack-8.08.0.32-2.el8_10
AlmaLinux 8dotnet-targeting-pack-9.09.0.21-1.el8_10
AlmaLinux 8dotnet-templates-10.010.0.113-1.el8_10
AlmaLinux 8dotnet-templates-8.08.0.132-2.el8_10
AlmaLinux 8dotnet-templates-9.09.0.122-1.el8_10
AlmaLinux 8netstandard-targeting-pack-2.19.0.122-1.el8_10
AlmaLinux 9aspnetcore-runtime-10.010.0.13-1.el9_8
AlmaLinux 9aspnetcore-runtime-8.08.0.32-1.el9_8
AlmaLinux 9aspnetcore-runtime-9.09.0.21-1.el9_8
AlmaLinux 9aspnetcore-runtime-dbg-10.010.0.13-1.el9_8
AlmaLinux 9aspnetcore-runtime-dbg-8.08.0.32-1.el9_8
AlmaLinux 9aspnetcore-runtime-dbg-9.09.0.21-1.el9_8
AlmaLinux 9aspnetcore-targeting-pack-10.010.0.13-1.el9_8
AlmaLinux 9aspnetcore-targeting-pack-8.08.0.32-1.el9_8
AlmaLinux 9aspnetcore-targeting-pack-9.09.0.21-1.el9_8
AlmaLinux 9dotnet-apphost-pack-10.010.0.13-1.el9_8
AlmaLinux 9dotnet-apphost-pack-8.08.0.32-1.el9_8
AlmaLinux 9dotnet-apphost-pack-9.09.0.21-1.el9_8
AlmaLinux 9dotnet-host10.0.13-1.el9_8
AlmaLinux 9dotnet-hostfxr-10.010.0.13-1.el9_8
AlmaLinux 9dotnet-hostfxr-8.08.0.32-1.el9_8
AlmaLinux 9dotnet-hostfxr-9.09.0.21-1.el9_8
AlmaLinux 9dotnet-runtime-10.010.0.13-1.el9_8
AlmaLinux 9dotnet-runtime-8.08.0.32-1.el9_8
AlmaLinux 9dotnet-runtime-9.09.0.21-1.el9_8
AlmaLinux 9dotnet-runtime-dbg-10.010.0.13-1.el9_8
AlmaLinux 9dotnet-runtime-dbg-8.08.0.32-1.el9_8
AlmaLinux 9dotnet-runtime-dbg-9.09.0.21-1.el9_8
AlmaLinux 9dotnet-sdk-10.010.0.113-1.el9_8
AlmaLinux 9dotnet-sdk-10.0-source-built-artifacts10.0.113-1.el9_8
AlmaLinux 9dotnet-sdk-8.08.0.132-1.el9_8
AlmaLinux 9dotnet-sdk-8.0-source-built-artifacts8.0.132-1.el9_8
AlmaLinux 9dotnet-sdk-9.09.0.122-1.el9_8
AlmaLinux 9dotnet-sdk-9.0-source-built-artifacts9.0.122-1.el9_8
AlmaLinux 9dotnet-sdk-aot-10.010.0.113-1.el9_8
AlmaLinux 9dotnet-sdk-aot-9.09.0.122-1.el9_8
AlmaLinux 9dotnet-sdk-dbg-10.010.0.113-1.el9_8
AlmaLinux 9dotnet-sdk-dbg-8.08.0.132-1.el9_8
AlmaLinux 9dotnet-sdk-dbg-9.09.0.122-1.el9_8
AlmaLinux 9dotnet-targeting-pack-10.010.0.13-1.el9_8
AlmaLinux 9dotnet-targeting-pack-8.08.0.32-1.el9_8
AlmaLinux 9dotnet-targeting-pack-9.09.0.21-1.el9_8
AlmaLinux 9dotnet-templates-10.010.0.113-1.el9_8
AlmaLinux 9dotnet-templates-8.08.0.132-1.el9_8
AlmaLinux 9dotnet-templates-9.09.0.122-1.el9_8
AlmaLinux 9netstandard-targeting-pack-2.19.0.122-1.el9_8
Chainguarddotnet-bootstrap-8no fix
Chainguarddotnet-bootstrap-9no fix
Red Hat hummingbird 1aspnetcore-runtime-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1aspnetcore-runtime-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1aspnetcore-runtime-dbg-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1aspnetcore-runtime-dbg-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1aspnetcore-targeting-pack-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1aspnetcore-targeting-pack-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1dotnet-apphost-pack-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1dotnet-apphost-pack-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1dotnet-hostfxr-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1dotnet-hostfxr-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1dotnet-runtime-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1dotnet-runtime-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1dotnet-runtime-dbg-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1dotnet-runtime-dbg-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1dotnet-sdk-10.00:10.0.113-1.hum1
Red Hat hummingbird 1dotnet-sdk-10.0-source-built-artifacts0:10.0.113-1.hum1
Red Hat hummingbird 1dotnet-sdk-8.00:8.0.132-0.1.hum1
Red Hat hummingbird 1dotnet-sdk-8.0-source-built-artifacts0:8.0.132-0.1.hum1
Red Hat hummingbird 1dotnet-sdk-9.00:9.0.122-0.1.hum1
Red Hat hummingbird 1dotnet-sdk-9.0-source-built-artifacts0:9.0.122-0.1.hum1
Red Hat hummingbird 1dotnet-sdk-aot-10.00:10.0.113-1.hum1
Red Hat hummingbird 1dotnet-sdk-aot-9.00:9.0.122-0.1.hum1
Red Hat hummingbird 1dotnet-sdk-dbg-10.00:10.0.113-1.hum1
Red Hat hummingbird 1dotnet-sdk-dbg-8.00:8.0.132-0.1.hum1
Red Hat hummingbird 1dotnet-sdk-dbg-9.00:9.0.122-0.1.hum1
Red Hat hummingbird 1dotnet-targeting-pack-8.00:8.0.32-0.1.hum1
Red Hat hummingbird 1dotnet-targeting-pack-9.00:9.0.21-0.1.hum1
Red Hat hummingbird 1dotnet-templates-10.00:10.0.113-1.hum1
Red Hat hummingbird 1dotnet-templates-8.00:8.0.132-0.1.hum1
Red Hat hummingbird 1dotnet-templates-9.00:9.0.122-0.1.hum1
Red Hat hummingbird 1dotnet10.00:10.0.113-1.hum1
Red Hat hummingbird 1dotnet8.00:8.0.132-0.1.hum1
Red Hat hummingbird 1dotnet9.00:9.0.122-0.1.hum1
Red Hat hummingbird 1netstandard-targeting-pack-2.10:9.0.122-0.1.hum1
Rocky Linux 10dotnet10.00:10.0.113-1.el10_2
Rocky Linux 10dotnet8.00:8.0.132-1.el10_2
Rocky Linux 10dotnet9.00:9.0.122-1.el10_2
Rocky Linux 8dotnet10.00:10.0.113-1.el8_10
Rocky Linux 8dotnet8.00:8.0.132-2.el8_10
Rocky Linux 8dotnet9.00:9.0.122-1.el8_10
Rocky Linux 9dotnet10.00:10.0.113-1.el9_8
Rocky Linux 9dotnet8.00:8.0.132-1.el9_8
Rocky Linux 9dotnet9.00:9.0.122-1.el9_8
Ubuntu 22.04 LTSdotnet6no fix
Ubuntu 22.04 LTSdotnet7no fix
Ubuntu 22.04 LTSdotnet88.0.132-8.0.32-0ubuntu1~22.04.1
Ubuntu 24.04 LTSdotnet1010.0.113-10.0.13-0ubuntu1~24.04.1
Ubuntu 24.04 LTSdotnet88.0.132-8.0.32-0ubuntu1~24.04.1
Ubuntu 26.04 LTSdotnet1010.0.113-10.0.13-0ubuntu1~26.04.1
Ubuntu 26.10dotnet1010.0.113-10.0.13-0ubuntu1~26.10.1
Ubuntu 26.10dotnet1111.0.100-11.0.0~rc2-0ubuntu1~26.10.1
Wolfidotnet-bootstrap-8no fix
Wolfidotnet-bootstrap-9no fix