Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2791 articles · 111153 vulns · 38/41 feeds (7d)
← Back to list
7.5
CVE-2026-23666EXPLOITEDPATCHED
microsoft · .net framework

.NET Framework Denial of Service Vulnerability

Description

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected Products

VendorProductVersions
microsoft.net framework3.5.0, 4.7.0, 4.8.0, 4.8.1, 4.7.0, 4.8.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftmicrosoft .net framework 3.5 andmitre_affected90%
microsoftmicrosoft .net frameworkmitre_affected90%
microsoftmicrosoft .net framework 4.6.2/4.7/4.7.1/4.7.2mitre_affected90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23666(vendor-advisory, patch)

Related News (6 articles)

Tier B
CERT-FR22h ago
Multiples vulnérabilités dans Microsoft .Net (15 avril 2026)
→ No new info (linked only)
Tier C
Cisco Talos1d ago
Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities
→ No new info (linked only)
Tier C
Qualys Blog1d ago
Microsoft and Adobe Patch Tuesday, April 2026 Security Update Review
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-23666 | Microsoft .NET Framework prior 4.8.9332.0 exceptional condition
→ No new info (linked only)
Tier A
Microsoft MSRC1d ago
CVE-2026-23666 .NET Framework Denial of Service Vulnerability
→ No new info (linked only)
Tier C
CrowdStrike Blog1d ago
April 2026 Patch Tuesday: Two Zero-Days and Eight Critical Vulnerabilities Among 164 CVEs
→ No new info (linked only)
CVSS 3.17.5 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
2.0.50727.8982 & 3.0.30729.89762.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.02.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.02.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.04.8.4801.0
CWECWE-755
PublishedApr 14, 2026
Last enriched1d agov2
Trending Score73
Source articles6
Independent6
Info Completeness9/14
Missing: title, epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

MEDIUMCVE-2026-32201EXPKEV
Microsoft SharePoint Server Spoofing Vulnerability
Trending: 147
HIGHCVE-2026-21262EXPKEV
SQL Server Elevation of Privilege Vulnerability
Trending: 90
CRITICALCVE-2026-33824EXP
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Trending: 88
HIGHCVE-2026-32157EXP
Remote Desktop Client Remote Code Execution Vulnerability
Trending: 72
HIGHCVE-2026-33825EXP
Microsoft Defender Elevation of Privilege Vulnerability
Trending: 71

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 14, 2026
Discovered by ZDM
Apr 14, 2026
Updated: description, exploitAvailable, activelyExploited
Apr 14, 2026
Actively Exploited
Apr 15, 2026
Exploit Available
Apr 15, 2026
Patch Available
Apr 15, 2026

Version History

v2
Last enriched 1d ago
v2Tier A1d ago

Added a detailed description of the vulnerability and marked it as actively exploited with an exploit available.

descriptionexploitAvailableactivelyExploited
via Microsoft MSRC
v11d ago

Initial creation