This flaw is an uncontrolled resource consumption vulnerability in Microsoft .NET. It enables an unauthorized remote attacker to trigger excessive resource usage, exhausting memory or CPU, which in turn can cause the affected application or the entire system to become unresponsive. The weakness maps to CWE-400 (Uncontrolled Resource Consumption), CWE-611 (XML External Entity), and CWE-776 (Resource Exhaustion via Improper Management).

Microsoft .NET 10.0, 9.0, and 8.0 are listed as affected. No specific version subrange is provided, so all current releases of these three major releases are potentially impacted.

The CVSS score of 7.5 indicates high severity, yet the EPSS score is not listed, and the flaw is not in the CISA KEV catalog. The attack vector is inferred to be over a network, as the description states the denial of service can be mounted over a network connection. Exploitation would involve sending a crafted request or sequence that forces the .NET runtime to consume excessive resources, leading to service disruption. No exploit code is publicly referenced, so the exploitation path is considered moderate, but the impact on availability can be severe for exposed services.