System has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was October 2026 with 5. The median CVSS is 7.5 (high). None have a confirmed exploitation report. Most affected products: System.Security.Cryptography.Xml (4), System.Security.Cryptography.Pkcs (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Weakness classes
Products
- System.Security.Cryptography.Xml 4
- System.Security.Cryptography.Pkcs 1
Worst active — by depth score
CVE-2026-96960High· 7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.41CVE-2026-96959High· 7.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.41CVE-2026-96958High· 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.41CVE-2026-96222High· 7.4Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.41CVE-2026-84008High· 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.41
System vulnerabilities
CVEs affecting System, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-96960High· 7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96959High· 7.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96958High· 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96222High· 7.4Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-84008High· 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.