ASP.NET Core Denial of Service Vulnerability

Summary

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Remediation

1. Inventory every Microsoft Microsoft Visual Studio 2022 version 17.14 deployment, including staging.
2. Upgrade Microsoft Microsoft Visual Studio 2022 version 17.14 to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109468