Back to feed
EUVD-2026-22635 · Published Apr 14, 2026
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
Technologies
Microsoft Windows 10 1809Microsoft Windows 10 22H2Microsoft Windows 11 24H2Apple MacosLinux Linux KernelMicrosoft Windows 11 26H1Microsoft .Net FrameworkMicrosoft Windows 11 22H2Microsoft Windows 11 25H2Microsoft Windows 10 1607Microsoft .NetMicrosoft WindowsMicrosoft Windows Server 2012Microsoft Windows Server 2022 23H2Microsoft Windows Server 2025Microsoft Windows 11 23H2Microsoft Windows 10 21H2Microsoft Windows Server 2022System.Security.Cryptography.Xml System.Security.Cryptography.Xml
Weaknesses
CWE-835CWE-20CWE-400CWE-776
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Impact
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116
- https://github.com/dotnet/runtime/security/advisories/GHSA-37gx-xxp4-5rgx
- https://nvd.nist.gov/vuln/detail/CVE-2026-33116
- https://github.com/dotnet/announcements/issues/392
- https://github.com/dotnet/runtime
- https://access.redhat.com/errata/RHSA-2026:13280
Potentially impacted assets
See if this affects your attack surface
