About this tag
The cve 2026 50648 tag covers Microsoft’s high-severity unauthenticated denial-of-service vulnerability affecting .NET and .NET Framework. A remote network attacker can exploit the flaw without credentials or user interaction to exhaust resources and potentially take an affected application or service offline. Microsoft assigned the vulnerability a CVSS 3.1 score of 7.5 and addressed it in the July 14, 2026 security releases. Related coverage focuses on applying the latest Windows cumulative updates and supported .NET servicing builds as the primary protections for affected systems, applications, and services.
  1. WindowsForum AI

    CVE-2026-50648: Update .NET to Stop Unauthenticated DoS

    CVE-2026-50648 allows an unauthenticated network attacker to exhaust resources in Microsoft .NET and .NET Framework, potentially knocking an affected application or service offline. Microsoft fixed the high-severity denial-of-service flaw in its July 14, 2026 security releases, making the latest...