This vulnerability (CVE-2026-32203) is a stack-based buffer overflow in Microsoft .NET 10.0, specifically triggered during encrypted key nested decryption. It allows a remote attacker to cause a denial of service by crashing the system due to a stack overflow. The vulnerability is classified under CWE-121 (Stack-based Buffer Overflow) and CWE-787 (Out-of-bounds Write). The CVSS v3.1 base score is 7.5, indicating high severity, with an attack vector over the network, no privileges required, and no user interaction needed. Microsoft has released an official fix for this vulnerability. Red Hat advisories confirm the impact on their distributions and note that mitigation options are limited, emphasizing the importance of applying the official patch.

The vulnerability enables a remote attacker to cause a denial of service by triggering a stack overflow during encrypted key nested decryption in .NET 10.0. This results in the affected system crashing or becoming unavailable to legitimate users. There is no impact on confidentiality or integrity, but availability is severely affected. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft and should be applied to affected systems running .NET 10.0. Red Hat notes that no effective mitigations currently meet their criteria for ease of use and stability, so patching is the recommended remediation. Users should consult the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32203 for patch details and apply updates promptly.