This vulnerability (CVE-2026-32226) involves a race condition (CWE-362) in Microsoft .NET Framework 3.5 version 3.5.0, where improper synchronization of concurrent access to shared resources can be exploited by an unauthorized attacker to cause denial of service. The CVSS 3.1 base score is 5.9, reflecting network attack vector, high attack complexity, no privileges or user interaction required, and impact limited to availability. Microsoft has published an official fix for this vulnerability, as detailed in their security update guide.

An attacker can exploit this race condition vulnerability remotely to cause a denial of service, impacting the availability of affected systems running .NET Framework 3.5. There is no impact on confidentiality or integrity. No known exploits are currently reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32226 to remediate this vulnerability.