Microsoft Asp.net Core vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Asp.net Core: 7 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:asp.net_core

CVE-2026-69304 Medium · 5.9 CWE-409 Sep 8, 2026

ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-45591 High · 7.5 CWE-400 Jun 9, 2026

ASP.NET Core Denial of Service Vulnerability

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-40372 Critical · 9.1 CWE-347 Apr 21, 2026

ASP.NET Core Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-26130 High · 7.5 CWE-770 Mar 10, 2026

ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2025-55315 Critical · 9.9 Public exploit CWE-444 Oct 14, 2025

ASP.NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

CVE-2023-44487 High · 7.5 KEV Urgent · 73 Public exploit CWE-400 Oct 10, 2023

HTTP/2 Rapid Reset Attack Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2023-38180 High · 7.5 KEV High · 58 CWE-400 Aug 8, 2023

Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability