This vulnerability (CWE-770) in Microsoft .NET 10.0 occurs due to allocation of resources without proper limits or throttling, enabling an attacker to trigger a denial of service condition remotely without authentication or user interaction. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. Microsoft has released an official fix for this issue as documented in their security update guide.

An attacker can remotely cause a denial of service by exhausting system resources in .NET 10.0, impacting availability. There is no confidentiality or integrity impact. The vulnerability does not require privileges or user interaction, increasing its risk. No known exploits are reported in the wild at this time.

Microsoft has provided an official fix for this vulnerability. Users and administrators should apply the security update available from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302 to remediate this issue.