CVE-2026-45591Patch(apple / .net)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apple .net systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

apple CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591

Other references

Weakness type (CWE)

CWE-400CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

.net
asp.net_core
linux_kernel
macos

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 2 mentions (2026-06-09); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

apple linux microsoft

Products

.netasp.net_corelinux_kernelmacosvisual_studio_2026windows

1 version affected across 6 products

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Patch

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-09	2	Patch2
2026-06-12	1	Disclosure1

Full discourse3 posts

ThreatCluster@threatcluster134d
Disclosure
Ubuntu reported two .NET vulnerabilities, CVE-2026-45491 and CVE-2026-45591, enabling local file tampering and denial of service across Ubuntu 26.04 LTS, 25.10, 24.04 LTS and 22.04 LTS in security advisory USN-8420-1. https://threatcluster.io/cluster/critical-net-vulnerabilities-in-ubuntu-affect-multiple-relea-bcc015e8
Post summary
Ubuntu announced two .NET vulnerabilities (CVE‑2026‑45491 and CVE‑2026‑45591) causing local file tampering and denial of service across multiple Ubuntu releases, with a security advisory USN‑8420‑1 outlining the available fixes.
0000057
330 followersView on X
WindowsForum@windowsforum136d
Patch
🪟 “Important” http://ASP.NET Core DoS patch for .NET 8–10 + VS 2026… aka “your server will work harder than your patience.” Even if it’s not public, it still tests your load limits. #Windows #Microsoft #ASPNetCore #DotNet #CVE https://windowsforum.com/threads/cve-2026-45591-patch-tuesday-asp-net-core-dos-fix-for-net-8-10-and-vs-2026.424459/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #DenialOfService #AspNetCore
Post summary
The post announces an important DoS patch for ASP.NET Core related to CVE‑2026‑45591, linking to a forum thread and urging review of the patch.
0000024
1.2K followersView on X
WindowsForum@windowsforum136d
Patch
🪟 “Important” http://ASP.NET Core DoS patch for .NET 8–10 + VS 2026… aka “your server will work harder than your patience.” Even if it’s not public, it still tests your load limits. #Windows #Microsoft #ASPNetCore #DotNet #CVE https://windowsforum.com/threads/cve-2026-45591-patch-tuesday-asp-net-core-dos-fix-for-net-8-10-and-vs-2026.424459/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #DenialOfService… https://t.co/Ojah33adgq
Post summary
The text highlights a patch for ASP.NET Core DoS CVE‑2026‑45591 affecting .NET 8–10 and VS 2026, but offers no PoC, exploit code, or evidence of active exploitation.
0000031
1.2K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	macos	-	-	-
OS	linux	linux_kernel	-	-	-
App	microsoft	.net	-	-	-
App	microsoft	asp.net_core	-	-	-
App	microsoft	visual_studio_2026	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard apple CVEs linux CVEs microsoft CVEs .net vulnerabilities