Microsoft ASP.NET Core 11.0 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft ASP.NET Core 11.0: 5 record(s), with affected versions and fixes.

CVE-2026-96236 High · 7.5 CWE-770 Oct 13, 2026

ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-88092 Critical · 9.4 CWE-444 Oct 13, 2026

ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

CVE-2026-70188 Critical · 9.1 CWE-444 Oct 13, 2026

ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70183 High · 7.5 CWE-362 Oct 13, 2026

ASP.NET Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVE-2026-69304 Medium · 5.9 CWE-409 Sep 8, 2026

ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.