Microsoft Asp.net Core vulnerabilities

• microsoft asp.net core, asp.net core 10.0, asp.net core 11.0 +6 more +8 more ASP.NET Core Tampering Vulnerability CVE-2026-88092 Fix available 9.4 CriticalOctober 13, 2026
• microsoft asp.net core odata, aspnetcore.odata +1 more ASP.NET Core Denial of Service Vulnerability CVE-2026-57099 7.5 HighSeptember 8, 2026
• microsoft .net, asp.net core, .net 10.0 runtime +10 more +12 more ASP.NET Core Denial of Service Vulnerability CVE-2026-69304 Fix available 5.9 MediumSeptember 8, 2026
• microsoft asp.net core odata, aspnet.odata, aspnetcore.odata +1 more +3 more OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability CVE-2026-45646 7.5 HighJuly 14, 2026
• microsoft asp.net core odata, aspnet.odata, aspnetcore.odata +1 more +3 more OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability CVE-2026-50506 7.5 HighJuly 14, 2026
• microsoft .net, asp.net core, .net 10.0 +14 more +16 more ASP.NET Core Denial of Service Vulnerability CVE-2026-45591 Fix available 7.5 HighMay 28, 2026
• microsoft asp.net core, asp.net core 10.0, visual studio 2026 version 18.5 +4 more +6 more ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-40372 Fix available EPSS 11.2% 9.1 CriticalApril 21, 2026
• microsoft asp.net core, asp.net core 10.0, asp.net core 8.0 +7 more +9 more ASP.NET Core Denial of Service Vulnerability CVE-2026-26130 Fix available 7.5 HighMarch 10, 2026
• microsoft asp.net core, asp.net core 2.3, asp.net core 8.0 +5 more +7 more ASP.NET Security Feature Bypass Vulnerability CVE-2025-55315 Public exploitFix available EPSS 67.2% 9.9 CriticalOctober 14, 2025
• microsoft asp.net core, asp.net core 8.0, asp.net core 9.0 +5 more +7 more ASP.NET Core and Visual Studio Denial of Service Vulnerability CVE-2025-26682 Fix available 7.5 HighApril 8, 2025
• microsoft asp.net core, asp.net core 8.0, asp.net core 9.0 +5 more +7 more ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability CVE-2025-24070 Fix available 7.0 HighMarch 11, 2025
• microsoft .net 6.0, .net 7.0, .net 8.0 +5 more +7 more .NET Denial of Service Vulnerability CVE-2024-21404 Fix available 7.5 HighFebruary 13, 2024
• microsoft asp.net core 6.0, asp.net core 7.0, asp.net core 8.0 +5 more +7 more .NET Denial of Service Vulnerability CVE-2024-21386 Fix available 7.5 HighFebruary 13, 2024
• microsoft asp.net core, .net 8.0, asp.net core 8.0 +5 more +7 more ASP.NET Core Denial of Service Vulnerability CVE-2023-36038 Fix available 8.2 HighNovember 14, 2023
• microsoft .net, asp.net core, .net 6.0 +10 more +12 more ASP.NET Core Security Feature Bypass Vulnerability CVE-2023-36558 Fix available 6.2 MediumNovember 14, 2023
• microsoft .net, asp.net core, .net 6.0 +6 more +8 more ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability CVE-2023-35391 Fix available 6.2 MediumAugust 8, 2023
• microsoft .net, fedoraproject fedora, microsoft .net 6.0 +8 more +10 more .NET and Visual Studio Denial of Service Vulnerability CVE-2023-38180 In KEVFix available EPSS 14.1% 7.5 HighAugust 8, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• microsoft asp.net core, asp.net core 3.1, asp.net core 5.0 +8 more +10 more ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability CVE-2021-43877 Fix available 8.8 HighDecember 15, 2021
• microsoft asp.net core, asp.net core 2.1, asp.net core 3.1 +7 more +9 more ASP.NET Core and Visual Studio Information Disclosure Vulnerability CVE-2021-34532 Fix available 5.5 MediumAugust 12, 2021
• microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 3.1 +5 more +7 more ASP.NET Core and Visual Studio Denial of Service Vulnerability CVE-2021-1723 Fix available 7.5 HighJanuary 12, 2021
• microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +5 more +7 more Microsoft ASP.NET Core Security Feature Bypass Vulnerability CVE-2020-1045 Fix available 7.5 HighSeptember 11, 2020
• microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +7 more +9 more ASP.NET Core Denial of Service Vulnerability CVE-2020-1597 Fix available 7.5 HighAugust 17, 2020
• microsoft asp.net core, asp.net core 3.1, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +5 more +7 more ASP.NET Core Denial of Service Vulnerability CVE-2020-1161 Fix available 7.5 HighMay 21, 2020
• microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 more Remote code execution in ASP.NET Core CVE-2020-0603 Fix available EPSS 22.6% 8.8 HighJanuary 14, 2020
• microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 more Denial of service in ASP.NET Core CVE-2020-0602 Fix available 7.5 HighJanuary 14, 2020
• microsoft asp.net core Elevation of privilege in ASP.NET Core CVE-2019-1302 Fix available 8.8 HighSeptember 11, 2019
• microsoft asp.net core Open redirect in ASP.NET Core CVE-2019-1075 Fix available 6.1 MediumJuly 15, 2019
• microsoft asp.net core Denial of service in ASP.NET Core CVE-2019-0982 Fix available 7.5 HighMay 16, 2019
• microsoft asp.net core A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ... CVE-2019-0815 7.5 HighApril 9, 2019
• microsoft asp.net core Denial of service in ASP.NET Core CVE-2019-0564 Fix available 7.5 HighJanuary 8, 2019
• microsoft asp.net core A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ... CVE-2019-0548 7.5 HighJanuary 8, 2019
• microsoft .net core, asp.net core +1 more Tampering vulnerability in .NET Core CVE-2018-8416 Fix available 6.5 MediumNovember 14, 2018
• microsoft .net core, powershell core, asp.net core +2 more .NET Core Information Disclosure CVE-2018-8292 Fix available EPSS 14.8% 7.5 HighOctober 10, 2018
• microsoft .net core, asp.net core, system.io.pipelines +2 more Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests CVE-2018-8409 Fix available 7.5 HighSeptember 13, 2018
• microsoft .net core, .net framework, asp.net core +2 more +4 more Improper Certificate Validation in Microsoft .NET Framework components CVE-2018-8356 Fix available 5.5 MediumJuly 11, 2018
• microsoft asp.net, asp.net core, asp.net mvc 5.2 +2 more +4 more Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated CVE-2018-8171 Fix available EPSS 10.8% 7.5 HighJuly 11, 2018
• microsoft .net core, powershell core, asp.net core +2 more .NET Core Denial of Service Vulnerability CVE-2018-0875 Fix available 7.5 HighMarch 14, 2018
• microsoft asp.net core ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET... CVE-2018-0808 7.5 HighMarch 14, 2018
• microsoft asp.net core ASP.NET Core allow an elevation of privilege CVE-2018-0787 Fix available 8.8 HighMarch 14, 2018
• microsoft asp.net core ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP... CVE-2018-0785 6.5 MediumJanuary 10, 2018
• microsoft asp.net core ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET... CVE-2018-0784 8.8 HighJanuary 10, 2018
• microsoft asp.net core Cross-origin Resource Sharing bypass in ASP.NET Core CVE-2017-8700 Fix available EPSS 10.4% 7.5 HighNovember 15, 2017
• microsoft asp.net core Open redirect in ASP.NET Core CVE-2017-11879 Fix available 8.8 HighNovember 15, 2017