HIGH 7.5 GitHub
CVE-2026-32203
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
## Executive Summary:
Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A vulnerability exists in EncryptedXml class where a buffer overflow can give an attacker to the ability to perform a Denial of Service attack.
## Announcement
Announcement for this issue can be found at https://github.com/
Affected Products
- nuget/System.Security.Cryptography.Xml >= 10.0.0, <= 10.0.5
- nuget/System.Security.Cryptography.Xml >= 9.0.0, <= 9.0.14
- nuget/System.Security.Cryptography.Xml >= 8.0.0, <= 8.0.2
References
- https://github.com/advisories/GHSA-6588-8gv4-xfgh
- https://github.com/dotnet/runtime/security/advisories/GHSA-6588-8gv4-xfgh
- https://nvd.nist.gov/vuln/detail/CVE-2026-32203
- https://github.com/dotnet/runtime/issues/126891
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-07-28 via GitHub. Affected: nuget/System.Security.Cryptography.Xml >= 10.0.0, <= 10.0.5, nuget/System.Security.Cryptography.Xml >= 9.0.0, <= 9.0.14, nuget/System.Security.Cryptography.Xml >= 8.0.0, <= 8.0.2.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.