CVE-2026-33116High· 7.5▾ TwilightLoop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.1%
2.1% → 2.4%
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
.net >= 10.0.0, < 10.0.6.net >= 8.0.0, < 8.0.26.net >= 9.0.0, < 9.0.15.net_framework = 3.5.net_framework = 4.7.2.net_framework = 4.6.2.net_framework = 4.7.net_framework = 4.7.1.net_framework = 4.8.net_framework = 4.8.1Upgrade past the affected range:
.net 9.0.15Connected by shared product, vendor, weakness, or advisory.
CVE-2021-31957Medium· 5.9ASP.NET Core Denial of Service Vulnerability
CVE-2026-108427High· 8.8Microsoft Office Word Remote Code Execution Vulnerability
CVE-2016-0025High· 7.3Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2…
CVE-2026-97811High· 7.8Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97805Critical· 9.8Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2015-2466Critical· 9.3Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability."