CVE-2026-45591
7.5 ÉlevéeDescription
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Produits concernés
- Microsoft .NET 10.0
- Microsoft .NET 8.0
- Microsoft .NET 9.0
- Microsoft ASP.NET Core 10.0
- Microsoft ASP.NET Core 8.0
- Microsoft ASP.NET Core 9.0
- Microsoft Visual Studio 2026 version 18.6
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
- Red Hat Enterprise Linux 9.6 Extended Update Support
- Red Hat Hardened Images
- Microsoft asp.net core
- Microsoft visual studio 2026
- Microsoft .net
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.5 Élevée | secure@microsoft.com | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 3.1 | 7.5 Élevée | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Faiblesses (CWE)
Références
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:17527
- https://access.redhat.com/errata/RHSA-2026:25110
- https://access.redhat.com/errata/RHSA-2026:25111
- https://access.redhat.com/errata/RHSA-2026:25112
- https://access.redhat.com/errata/RHSA-2026:25113
- https://access.redhat.com/errata/RHSA-2026:25114
- https://access.redhat.com/errata/RHSA-2026:25115
- https://access.redhat.com/errata/RHSA-2026:25220
- https://access.redhat.com/errata/RHSA-2026:25221
- https://access.redhat.com/errata/RHSA-2026:25222
- https://access.redhat.com/errata/RHSA-2026:26638
- https://access.redhat.com/errata/RHSA-2026:26994
- https://access.redhat.com/errata/RHSA-2026:28007
- https://access.redhat.com/errata/RHSA-2026:28009
- https://access.redhat.com/errata/RHSA-2026:28011
- https://access.redhat.com/errata/RHSA-2026:28051
- https://access.redhat.com/errata/RHSA-2026:28227
- https://access.redhat.com/security/cve/CVE-2026-45591
- https://bugzilla.redhat.com/show_bug.cgi?id=2487224
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json