CVE-2026-109478
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS
7.5
Alta
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-407
Ainda não há histórico EPSS suficiente.
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1240165.3 MÉD—
——0postal-mime before 4.2.1 contains an algorithmic complexity denial of service vulnerability that allows unauthenticated remote attackers to cause excessive CPU consumption in the PostalMime.processLine() function by crafting deeply nested multipart email messages with boundary lines sharing long prefixes with open boundaries. Attackers can deliver a malicious email with nesting up to the default maxNestingDepth of 256, causing per-line parsing cost to scale as O(depth x shared prefix length) and blocking the Node.js event loop for seconds per message.3hCVE-2026-1207965.3 MÉD—
——0Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.4hCVE-2026-1187497.5 ALT—
——0Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.3hCVE-2026-1187477.5 ALT—
——0Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.3hCVE-2026-1181537.5 ALT—
——0Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.3hCVE-2026-1129667.5 ALT—
——0Uncontrolled resource consumption in Windows Security Account Manager allows an unauthorized attacker to deny service over a network.4h