M365 Change Tracker

← All changes · security · CVE-2026-114147

CVE-2026-114147ImportantMonitor

ASP.NET Core Denial of Service Vulnerability

Severity Important  ·  Urgency Monitor

Why it matters: Important severity (CVSS 7.5)

Denial of Service · Important · CVSS 7.5. Affects: Exchange Server, .NET 8.0 installed on Windows, .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 9.0 installed on Windows, .NET 9.0 installed on Linux.

CVSS 7.5Security update published 2026-11-11Applies to On-premisesKB5135243NVD

Affected: Exchange Server, .NET 8.0 installed on Windows, .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 9.0 installed on Windows, .NET 9.0 installed on Linux

Related changes

Change history

2026-11-10 · First captured by tracker

View at Microsoft →