Asp.net Core

asp.net_core

Vendor: Microsoft • 41 CVEs

CVEs (41)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-88092 1Microsoft 3Asp.net Core Visual Studio 2022Visual Studio 2026 Oct 16, 2026 Oct 13, 2026 N/A· v4 9.4 CRITICAL· v3 N/A· v2 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69304 1Microsoft 4.net Asp.net CoreVisual Studio 2022+1 more Sep 30, 2026 Sep 8, 2026 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-45591 1Microsoft 3.net Asp.net CoreVisual Studio 2026 Jul 15, 2026 Jun 9, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-40372 1Microsoft 1Asp.net Core Jul 15, 2026 Apr 21, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-26130 1Microsoft 1Asp.net Core Jul 15, 2026 Mar 10, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2025-55315 1Microsoft 2Asp.net Core Visual Studio 2022 Oct 18, 2026 Oct 14, 2025 N/A· v4 9.9 CRITICAL· v3 N/A· v2 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
CVE-2025-26682 1Microsoft 2Asp.net Core Visual Studio 2022 Jun 17, 2026 Apr 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2025-24070 1Microsoft 2Asp.net Core Visual Studio 2022 Jun 17, 2026 Mar 11, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2024-21404 1Microsoft 2Asp.net Core Visual Studio 2022 Aug 10, 2026 Feb 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 .NET Denial of Service Vulnerability
CVE-2024-21386 1Microsoft 2Asp.net Core Visual Studio 2022 Aug 10, 2026 Feb 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 .NET Denial of Service Vulnerability
CVE-2023-36558 1Microsoft 3.net Asp.net CoreVisual Studio 2022 Jun 17, 2026 Nov 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 ASP.NET Core Security Feature Bypass Vulnerability
CVE-2023-36038 1Microsoft 2Asp.net Core Visual Studio 2022 Jun 17, 2026 Nov 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 ASP.NET Core Denial of Service Vulnerability
CVE-2023-44487 33Akka AmazonApache+30 more 166.net 3scale Api Management PlatformAdvanced Cluster Management For Kubernetes+163 more Aug 11, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-38180 2Fedoraproject Microsoft 4.net Asp.net CoreFedora+1 more Aug 10, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 .NET and Visual Studio Denial of Service Vulnerability
CVE-2023-35391 1Microsoft 3.net Asp.net CoreVisual Studio 2022 Aug 10, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2021-43877 1Microsoft 3Asp.net Core Visual Studio 2019Visual Studio 2022 Jun 17, 2026 Dec 15, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
CVE-2021-34532 1Microsoft 2Asp.net Core Visual Studio 2019 Aug 10, 2026 Aug 12, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 ASP.NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2021-1723 2Fedoraproject Microsoft 3Asp.net Core FedoraVisual Studio 2019 Jun 17, 2026 Jan 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ASP.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2020-1045 3Fedoraproject MicrosoftRedhat 6Asp.net Core Enterprise LinuxEnterprise Linux Aus+3 more Jun 17, 2026 Sep 11, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker...Show more <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p>Show less
CVE-2020-1597 2Fedoraproject Microsoft 4Asp.net Core FedoraVisual Studio 2017+1 more Jun 17, 2026 Aug 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web applicatio...Show more A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.Show less

12 3 Next