CVE-2026-70162

Public on 2026-10-13
Modified on 2026-10-22
Description
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.
The update addresses the vulnerability by correcting how the .NET web application handles web requests.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
5.9
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 dotnet10.0 Not Affected
Amazon Linux 2027 Preview dotnet10.0 Not Affected
Amazon Linux 2023 dotnet6.0 No Fix Planned
Amazon Linux 2023 dotnet8.0 Not Affected
Amazon Linux 2023 dotnet9.0 Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H