Attackers can crash .NET services via network requests by exploiting uncontrolled recursion in XML processing components across multiple runtime versions.
A high-severity flaw in Microsoft’s .NET cryptography package allows remote attackers to crash services via resource amplification, with fixes now available.
