Advisories · Weakness

Denial of service.

Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-88084 CVE record

CVSS 5.3 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-67626 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2022 (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Denial of service
Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +10 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-f4g7-52wc-p8x7 · CVE-2026-96236 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +10 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-3rxq-g8rj-r2cf · CVE-2026-69651 Not analysed yet 13 Oct 2026
CVE-2026-75996 CVE record

CVSS 7.5 High

ColdFusion | Uncontrolled Resource Consumption (CWE-400)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-95696 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server Liberty Denial of Service
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-78633 CVE record

CVSS 6.5 Medium

Denial of Service in Okta RADIUS Agent Packet Parser
- Okta RADIUS Agent
- Denial of service
Not analysed yet 13 Oct 2026
System.Security.Cryptography.Xml NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.5, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-r955-8q5j-3h83 · CVE-2026-96958 Not analysed yet 13 Oct 2026
System.Security.Cryptography.Pkcs NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.2, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-846f-f764-76mx · CVE-2026-84008 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +11 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-mc4q-93x5-f6hj · CVE-2026-58280 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +11 NuGet

CVSS 5.9 Medium

Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

GHSA-57xr-hfxx-jw5x · CVE-2026-70196 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +11 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

GHSA-w5qq-qrpp-rf4c · CVE-2026-70181 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.SignalR.Common NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-334f-vvp4-7g6p · CVE-2026-70159 Not analysed yet 13 Oct 2026
CVE-2026-97811 CVE record

CVSS 7.8 High

Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-103558 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-97775 CVE record

CVSS 8.8 High

Microsoft Office Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 365 for Mac
- Denial of service
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96300 CVE record

CVSS 5.9 Medium

RPC Endpoint Mapper Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-83677 CVE record

CVSS 7.5 High

Windows DHCP Client Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-83645 CVE record

CVSS 7.5 High

Active Directory Federation Services (AD FS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-70072 CVE record

CVSS 6.5 Medium

Windows Netlogon Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-85324 CVE record

CVSS 7.5 High

Active Directory Federation Services (AD FS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-85321 CVE record

CVSS 7.5 High

Active Directory Federation Services (AD FS) Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-85319 CVE record

CVSS 7.5 High

Active Directory Federation Services (AD FS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-70163 CVE record

CVSS 7.5 High

Microsoft OpenSSH for Windows Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-70133 CVE record

CVSS 7.5 High

Windows SMB Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-70155 CVE record

CVSS 7.5 High

Windows DNS Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-70033 CVE record

CVSS 7.5 High

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-49785 CVE record

CVSS 7.8 High

UEFI Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-104817 CVE record

CVSS 8.7 High

Misskey: Lack of rate limiting and size restrictions in RSS fetching API
- misskey
- Denial of service
- Server-side request forgery (SSRF)
Not analysed yet 13 Oct 2026
CVE-2026-54086 CVE record

CVSS 5.3 Medium

SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
- esa sleapi-j
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-110249 CVE record

CVSS 8.6 High

Denial-of-service in the Exchange email component
- Mozilla Thunderbird
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-33374 CVE record

CVSS 6.5 Medium

Unbounded memory allocation in the Prometheus rule conversion API
- Grafana Enterprise
- Grafana OSS
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-95502 CVE record

CVSS 5.3 Medium

Git Sync memory exhaustion via a malicious Git server
- Grafana Nanogit
- Grafana OSS
- Denial of service
- CWE-409
Not analysed yet 13 Oct 2026
CVE-2026-102700 CVE record

CVSS 4.7 Medium

gnttab: cache-flush handling may cause page reference leak
- Xen
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-104005 CVE record

CVSS 7.1 High

Incorrect authorization in MongoDB Server router for bulk writes to system namespaces
- MongoDB Server
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-96299 CVE record

CVSS 7.1 High

Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service
- MongoDB Server
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-12656 CVE record

CVSS 8.7 High

1732E ArmorBlock® - Multiple Vulnerabilities
- Rockwell Automation 1732E ArmorBlock® I/O
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-103499 CVE record

CVSS 7.5 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
- IBM WebSphere Application Server - Liberty
- IBM WebSphere Application Server
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-74030 CVE record

CVSS 6.9 Medium

Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion
- wazuh-agent
- wazuh-manager
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109947 CVE record

CVSS 7.1 High

FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
- FreeRDP
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109946 CVE record

CVSS 7.1 High

FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width
- FreeRDP
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109944 CVE record

CVSS 7.1 High

FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle
- FreeRDP
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109941 CVE record

CVSS 7.1 High

FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response
- FreeRDP
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109678 CVE record

CVSS 7.1 High

FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA
- FreeRDP
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109781 CVE record

CVSS 6.5 Medium

Denial-of-service in the Printing: Output component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109775 CVE record

CVSS 6.5 Medium

Denial-of-service in the WebRTC component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109773 CVE record

CVSS 6.5 Medium

Denial-of-service in the Sync component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109768 CVE record

CVSS 6.5 Medium

Denial-of-service in the Site Reports component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109832 CVE record

CVSS 7.5 High

Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.8 Extended Update Support
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109149 CVE record

CVSS 6.9 Medium

beautifier js-beautify memory allocation
- beautifier js-beautify
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109144 CVE record

CVSS 6.9 Medium

wbond certvalidator Certificate Path Builder resource consumption
- wbond certvalidator
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-109107 CVE record

CVSS 6.9 Medium

Wavlink WL-WN592AX6 upload.cgi main null pointer dereference
- Wavlink WL-WN592AX6
- Denial of service
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-95127 CVE record

CVSS 7.5 High

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-19937 CVE record

CVSS 5.7 Medium

Bluetooth Mesh Access layer permanently leaks delayable-message contexts, disabling all model responses
- zephyr
- Denial of service
Not analysed yet 12 Oct 2026
CVE-2026-75095 CVE record

CVSS 7.5 High

IBM Aspera Enterprise Webapps Denial of Service
- IBM Aspera Enterprise WebApps
- Denial of service
Not analysed yet 12 Oct 2026
CVE-2026-90911 CVE record

CVSS 7.5 High

Maximo AI Service Denial of Service
- IBM Maximo AI Service
- Denial of service
Not analysed yet 12 Oct 2026
CVE-2026-90912 CVE record

CVSS 7.5 High

Maximo AI Service Denial of Service
- IBM Maximo AI Service
- Denial of service
Not analysed yet 12 Oct 2026
CVE-2026-92876 CVE record

CVSS 7.5 High

IBM Maximo Application Suite - IoT Component Denial of Service
- IBM Maximo Application Suite - IoT Component
- Denial of service
Not analysed yet 12 Oct 2026
CVE-2026-75881 CVE record

CVSS 7.5 High

IBM Maximo Application Suite - IoT Component Denial of Service
- IBM Maximo Application Suite - IoT Component
- Denial of service
Not analysed yet 12 Oct 2026
CVE-2026-109563 CVE record

CVSS 8.7 High

N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex
- rdfjs N3.js
- Denial of service
Not analysed yet 12 Oct 2026