PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-47302 Microsoft CVE debrief

A high-severity vulnerability was found in .NET, allowing an unauthorized attacker to deny service over a network. The CVE record was published on 2026-07-14T19:17:08.540Z and was last modified on 2026-07-21T00:16:56.770Z. This vulnerability has significant implications for .NET applications and services, potentially allowing attackers to disrupt service availability. Security teams and .NET developers should be aware of this vulnerability and take necessary actions to mitigate it. The vulnerability is caused by allocation of resources without limits or throttling in .NET, which can be exploited to deny service over a network.

Vendor
Microsoft
Product
.NET 10.0
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-14
Original CVE updated
2026-07-22
Advisory published
2026-07-14
Advisory updated
2026-07-22

Who should care

Security teams and .NET developers should be aware of this vulnerability and take necessary actions to mitigate it. .NET application owners and administrators should review their deployments and apply patches or mitigations as needed. Additionally, security teams should monitor network traffic for suspicious activity and review compensating controls for exposed systems.

Technical summary

CVE-2026-47302 is a vulnerability in .NET that allows an unauthorized attacker to deny service over a network due to allocation of resources without limits or throttling. The vulnerability has a CVSS score of 7.5 and a severity of HIGH. This vulnerability affects .NET applications and services, and attackers can exploit it to disrupt service availability. The vulnerability can be mitigated by applying patches provided by the vendor and reviewing .NET configurations to prevent exploitation.

Defensive priority

High priority should be given to patching this vulnerability as it can be exploited to deny service over a network.

Recommended defensive actions

  • Apply the patch provided by the vendor
  • Review and update .NET configurations to prevent exploitation
  • Monitor network traffic for suspicious activity
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record was published on 2026-07-14T19:17:08.540Z and was last modified on 2026-07-21T00:16:56.770Z. The NVD entry is currently Awaiting Analysis. The vulnerability has a CVSS score of 7.5 and a severity of HIGH. The CVE record was published by the CVE Program and the NVD entry is maintained by the National Institute of Standards and Technology (NIST).

Sources and references

Verified primary and authoritative sources

  • CVE-2026-47302 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-47302

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-47302 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-47302

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.