Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-26127

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

VectorNETWORK

PublishedMar 10, 2026, 18:18

Published Bysecure@microsoft.com

Base Score

7.5

Affected Versions

Package (Ecosystem)	Introduced	Fixed	Limit
Microsoft.Bcl.Memory(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.linux-arm(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.linux-arm64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.linux-musl-arm(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.linux-musl-arm64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.linux-musl-x64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.linux-x64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.osx-arm64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.osx-x64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.win-arm(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.win-arm64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.win-x64(NuGet)	9.0.0	9.0.14	N/A
Microsoft.NetCore.App.Runtime.win-x86(NuGet)	9.0.0	9.0.14	N/A
Microsoft.Bcl.Memory(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.linux-arm(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.linux-arm64(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.linux-musl-arm(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.linux-musl-arm64(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.linux-musl-x64(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.linux-x64(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.osx-arm64(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.osx-x64(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.win-arm(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.win-x64(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.win-x86(NuGet)	10.0.0	10.0.4	N/A
Microsoft.NetCore.App.Runtime.win-arm64(NuGet)	10.0.0	10.0.4	N/A