MEDIUMCVSS 5.9EPSS 0.8%

CVE-2026-70162

CVE-2026-70162 updated by NVD

Published: 2026-10-13
Modified: 2026-10-24
EPSS percentile: 55%
Sources: github-advisory, nvd

Summary

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
NuGet	System.Security.Cryptography.Pkcs	—	10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21

Remediation: Upgrade to 10.0.13 or later.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-70162

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.