CVE-2026-47302 Microsoft CVE debrief

Who should care

Security teams and .NET developers should be aware of this vulnerability and take necessary actions to mitigate it. .NET application owners and administrators should review their deployments and apply patches or mitigations as needed. Additionally, security teams should monitor network traffic for suspicious activity and review compensating controls for exposed systems.

Technical summary

CVE-2026-47302 is a vulnerability in .NET that allows an unauthorized attacker to deny service over a network due to allocation of resources without limits or throttling. The vulnerability has a CVSS score of 7.5 and a severity of HIGH. This vulnerability affects .NET applications and services, and attackers can exploit it to disrupt service availability. The vulnerability can be mitigated by applying patches provided by the vendor and reviewing .NET configurations to prevent exploitation.

Defensive priority

High priority should be given to patching this vulnerability as it can be exploited to deny service over a network.

Recommended defensive actions

• Apply the patch provided by the vendor
• Review and update .NET configurations to prevent exploitation
• Monitor network traffic for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record was published on 2026-07-14T19:17:08.540Z and was last modified on 2026-07-21T00:16:56.770Z. The NVD entry is currently Awaiting Analysis. The vulnerability has a CVSS score of 7.5 and a severity of HIGH. The CVE record was published by the CVE Program and the NVD entry is maintained by the National Institute of Standards and Technology (NIST).

Official resources