CVE-2026-39959
C# vulnerability analysis and mitigation

Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext. This vulnerability is fixed in Tmds.DBus 0.92.0 and Tmds.DBus.Protocol 0.92.0 and 0.21.3.


SourceNVD

Related C# vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

GHSA-mvm6-f9r3-fgfxHIGH7.7
  • C#C#
  • AWSSDK.CloudFront
NoYesMar 27, 2026
CVE-2026-39959HIGH7.1
  • C#C#
  • Tmds.DBus
NoYesApr 09, 2026
CVE-2026-33536MEDIUM4.7
  • C#C#
  • ImageMagick-c++-devel
NoYesMar 26, 2026
GHSA-9r56-3gjq-hqf7LOW3.3
  • C#C#
  • Magick.NET-Q16-OpenMP-x64
NoYesMar 26, 2026
GHSA-6p22-q7w5-33pgLOW3.3
  • C#C#
  • Magick.NET-Q16-HDRI-AnyCPU
NoYesMar 26, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management