CVE-2022-26832

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

.NET Framework Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8>= 4.8.0, < 4.8.4494.03
MicrosoftMicrosoft .NET Framework 4.5.2>= 4.0.0.0, < 4.0.52732.36732
MicrosoftMicrosoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2>= 4.0.0.0, < 4.7.03930.02
MicrosoftMicrosoft .NET Framework 4.8>= 4.8.0, < 4.8.04494.03
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2>= 4.7.0, < 4.7.3930.02
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2>= 3.0.0.0, < 10.0.14393.5066
MicrosoftMicrosoft .NET Framework 4.6>= 4.0.0.0, < 4.0.52732.36732
MicrosoftMicrosoft .NET Framework 2.0 Service Pack 2>= 2.0.0, < 2.0.50727.8962
MicrosoftMicrosoft .NET Framework 3.0 Service Pack 2>= 3.0.0, < 2.0.50727.8962
MicrosoftMicrosoft .NET Framework 3.5>= 3.5.0, < publication
MicrosoftMicrosoft .NET Framework 3.5.1>= 3.5.0, < 6.1.50727.8962

References

Timeline

Published
Apr 15, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-268339.4An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A speciaCVE-2022-268347.5Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information CVE-2022-268354.9On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior CVE-2022-268369.8Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/CaCVE-2022-268377.0Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of CVE-2022-268386.5Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause CVE-2022-268397.8Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie applicatiCVE-2022-26845.4A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability aCVE-2022-268407.8Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enablCVE-2022-268415.5Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user tCVE-2022-268429.6A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master comCVE-2022-268439.8Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel(R)
CVE-2022-26832: High severity, CVSS 7.5 | Vulnix