This vulnerability, classified under CWE-770, occurs in Microsoft .NET 10.0.0 where resource allocation lacks proper limits or throttling mechanisms. As a result, an attacker without privileges or user interaction can exploit this to deny service by consuming excessive resources remotely. The CVSS 3.1 base score is 7.5, indicating high severity due to network attack vector, low attack complexity, no privileges required, and no user interaction needed. Microsoft has published an official fix for this vulnerability, as detailed in their security advisory.

Exploitation of this vulnerability can result in denial of service conditions, impacting availability of applications or services running on the affected .NET version. There is no impact on confidentiality or integrity reported. No known exploits are currently observed in the wild.

An official fix is available from Microsoft to remediate this vulnerability. Users and administrators should apply the provided patch as soon as possible. Refer to the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302 for detailed update instructions and to confirm patch availability.