Microsoft Asp.net Core vulnerabilities

• microsoft .net 10.0 installed on linux, .net 10.0 installed on mac os, .net 10.0 installed on windows +11 more +13 more ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Public exploitFix available 7.8 HighOctober 26, 2026
• microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 more ASP.NET Core Denial of Service Vulnerability CVE-2026-96236 Fix available 7.5 HighOctober 13, 2026
• microsoft asp.net core, asp.net core 10.0, asp.net core 11.0 +6 more +8 more ASP.NET Core Tampering Vulnerability CVE-2026-88092 Fix available 9.4 CriticalOctober 13, 2026
• microsoft asp.net core 10.0, asp.net core 8.0, asp.net core 9.0 +2 more +4 more ASP.NET Core Denial of Service Vulnerability CVE-2026-70196 Fix available 5.9 MediumOctober 13, 2026
• microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 more ASP.NET Core Security Feature Bypass Vulnerability CVE-2026-70188 Fix available 9.1 CriticalOctober 13, 2026
• microsoft asp.net core 10.0, asp.net core 8.0, asp.net core 9.0 +2 more +4 more ASP.NET Core Denial of Service Vulnerability CVE-2026-70186 Fix available 7.5 HighOctober 13, 2026
• microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 more ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-70183 Fix available 7.5 HighOctober 13, 2026
• microsoft asp.net core 10.0, asp.net core 8.0, asp.net core 9.0 +2 more +4 more ASP.NET Core Denial of Service Vulnerability CVE-2026-70181 Fix available 7.5 HighOctober 13, 2026
• microsoft asp.net core 10.0, asp.net core 8.0, asp.net core 9.0 +2 more +4 more ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-70175 Fix available 8.1 HighOctober 13, 2026
• microsoft .net, asp.net core, .net 10.0 runtime +10 more +12 more ASP.NET Core Denial of Service Vulnerability CVE-2026-69304 Fix available 5.9 MediumSeptember 8, 2026
• microsoft .net, asp.net core, .net 10.0 +14 more +16 more ASP.NET Core Denial of Service Vulnerability CVE-2026-45591 Fix available 7.5 HighMay 28, 2026
• microsoft asp.net core, asp.net core 10.0, visual studio 2026 version 18.5 +4 more +6 more ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-40372 Fix available EPSS 11.2% 9.1 CriticalApril 21, 2026
• microsoft asp.net core, asp.net core 10.0, asp.net core 8.0 +7 more +9 more ASP.NET Core Denial of Service Vulnerability CVE-2026-26130 Fix available 7.5 HighMarch 10, 2026
• microsoft asp.net core, asp.net core 2.3, asp.net core 8.0 +5 more +7 more ASP.NET Security Feature Bypass Vulnerability CVE-2025-55315 Public exploitFix available EPSS 67.2% 9.9 CriticalOctober 14, 2025
• microsoft asp.net core, asp.net core 6.0, microsoft.aspnetcore.app.runtime.linux-arm +12 more +14 more EOL ASP.NET Core Elevation of Privilege Vulnerability CVE-2025-7326 Fix available 7.0 HighJuly 8, 2025
• microsoft asp.net core, asp.net core 8.0, asp.net core 9.0 +5 more +7 more ASP.NET Core and Visual Studio Denial of Service Vulnerability CVE-2025-26682 Fix available 7.5 HighApril 8, 2025
• microsoft asp.net core, asp.net core 8.0, asp.net core 9.0 +5 more +7 more ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability CVE-2025-24070 Fix available 7.0 HighMarch 11, 2025
• microsoft asp.net core 6.0, asp.net core 7.0, asp.net core 8.0 +5 more +7 more .NET Denial of Service Vulnerability CVE-2024-21386 Fix available 7.5 HighFebruary 13, 2024
• microsoft asp.net core, .net 8.0, asp.net core 8.0 +5 more +7 more ASP.NET Core Denial of Service Vulnerability CVE-2023-36038 Fix available 8.2 HighNovember 14, 2023
• microsoft .net, asp.net core, .net 6.0 +10 more +12 more ASP.NET Core Security Feature Bypass Vulnerability CVE-2023-36558 Fix available 6.2 MediumNovember 14, 2023
• microsoft .net, asp.net core, .net 6.0 +6 more +8 more ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability CVE-2023-35391 Fix available 6.2 MediumAugust 8, 2023
• microsoft .net, fedoraproject fedora, microsoft .net 6.0 +8 more +10 more .NET and Visual Studio Denial of Service Vulnerability CVE-2023-38180 In KEVFix available EPSS 14.1% 7.5 HighAugust 8, 2023
• microsoft asp.net core, asp.net core 3.1, asp.net core 5.0 +8 more +10 more ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability CVE-2021-43877 Fix available 8.8 HighDecember 15, 2021
• microsoft asp.net core, asp.net core 2.1, asp.net core 3.1 +7 more +9 more ASP.NET Core and Visual Studio Information Disclosure Vulnerability CVE-2021-34532 Fix available 5.5 MediumAugust 12, 2021
• microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 3.1 +5 more +7 more ASP.NET Core and Visual Studio Denial of Service Vulnerability CVE-2021-1723 Fix available 7.5 HighJanuary 12, 2021
• microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +5 more +7 more Microsoft ASP.NET Core Security Feature Bypass Vulnerability CVE-2020-1045 Fix available 7.5 HighSeptember 11, 2020
• microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +7 more +9 more ASP.NET Core Denial of Service Vulnerability CVE-2020-1597 Fix available 7.5 HighAugust 17, 2020
• microsoft asp.net core, asp.net core 3.1, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +5 more +7 more ASP.NET Core Denial of Service Vulnerability CVE-2020-1161 Fix available 7.5 HighMay 21, 2020
• microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 more Remote code execution in ASP.NET Core CVE-2020-0603 Fix available EPSS 22.6% 8.8 HighJanuary 14, 2020
• microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 more Denial of service in ASP.NET Core CVE-2020-0602 Fix available 7.5 HighJanuary 14, 2020
• microsoft asp.net core Elevation of privilege in ASP.NET Core CVE-2019-1302 Fix available 8.8 HighSeptember 11, 2019
• microsoft asp.net core Open redirect in ASP.NET Core CVE-2019-1075 Fix available 6.1 MediumJuly 15, 2019
• microsoft asp.net core Denial of service in ASP.NET Core CVE-2019-0982 Fix available 7.5 HighMay 16, 2019
• microsoft asp.net core A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ... CVE-2019-0815 7.5 HighApril 9, 2019
• microsoft asp.net core Denial of service in ASP.NET Core CVE-2019-0564 Fix available 7.5 HighJanuary 8, 2019
• microsoft asp.net core A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ... CVE-2019-0548 7.5 HighJanuary 8, 2019
• microsoft .net core, asp.net core, system.io.pipelines +2 more Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests CVE-2018-8409 Fix available 7.5 HighSeptember 13, 2018
• microsoft .net core, .net framework, asp.net core +2 more +4 more Improper Certificate Validation in Microsoft .NET Framework components CVE-2018-8356 Fix available 5.5 MediumJuly 11, 2018
• microsoft asp.net, asp.net core, asp.net mvc 5.2 +2 more +4 more Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated CVE-2018-8171 Fix available EPSS 10.8% 7.5 HighJuly 11, 2018
• microsoft asp.net core ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET... CVE-2018-0808 7.5 HighMarch 14, 2018
• microsoft asp.net core ASP.NET Core allow an elevation of privilege CVE-2018-0787 Fix available 8.8 HighMarch 14, 2018
• microsoft asp.net core ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP... CVE-2018-0785 6.5 MediumJanuary 10, 2018
• microsoft asp.net core ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET... CVE-2018-0784 8.8 HighJanuary 10, 2018
• microsoft asp.net core Cross-origin Resource Sharing bypass in ASP.NET Core CVE-2017-8700 Fix available EPSS 10.4% 7.5 HighNovember 15, 2017
• microsoft asp.net core Open redirect in ASP.NET Core CVE-2017-11879 Fix available 8.8 HighNovember 15, 2017
• microsoft asp.net core, asp.net model view controller, microsoft.aspnetcore.mvc.abstractions +16 more +18 more Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc CVE-2017-0256 Fix available 5.3 MediumMay 12, 2017
• microsoft asp.net core, asp.net model view controller, microsoft.aspnetcore.mvc.abstractions +16 more +18 more High severity vulnerability that affects Microsoft.AspNetCore.Mvc CVE-2017-0249 Fix available 7.3 HighMay 12, 2017
• microsoft asp.net core, system.text.encodings.web, asp.net model view controller +16 more +18 more ASP.NET Core fails to properly validate web requests CVE-2017-0247 Fix available EPSS 16.9% 7.5 HighMay 12, 2017