Microsoft Asp.Net Core vulnerabilities, page 2
41 vulnerabilities
Known vulnerabilities in Microsoft Asp.Net Core, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-0603microsoftasp.net_core+14
EPSS score21.01%
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.CVE-2020-0602microsoftasp.net_core+13EPSS score7.61%
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.CVE-2017-11879microsoft corporationasp.net core+3EPSS score9.40%
ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".CVE-2017-8700microsoft corporationasp.net core+3EPSS score10.48%
ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".CVE-2024-21404ubuntudotnet6+46EPSS score2.71%
.NET Denial of Service VulnerabilityCVE-2024-21386ubuntudotnet6+22EPSS score2.42%
.NET Denial of Service VulnerabilityCVE-2019-1075microsoftasp.net_core+4EPSS score2.64%
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.CVE-2019-1302microsoftasp.net_core+1EPSS score4.85%
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.CVE-2019-0815microsoftasp.net_coreEPSS score6.97%
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.CVE-2019-0982microsoftasp.net_core+1EPSS score6.68%
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.CVE-2019-0564microsoftasp.net_core+6EPSS score8.39%
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.CVE-2019-0548microsoftasp.net_coreEPSS score8.21%
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.CVE-2026-40372ubuntudotnet10+5EPSS score0.82%
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.CVE-2026-26130chainguarddotnet-bootstrap-10+48EPSS score2.54%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-69304chainguardaspnet-8-targeting-pack+20EPSS score0.88%
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-45591chainguarddotnet-bootstrap-8+22EPSS score2.44%
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2023-36038microsoftasp.net_core+7EPSS score2.78%
ASP.NET Core Denial of Service VulnerabilityCVE-2023-36558ubuntudotnet6+15EPSS score1.08%
ASP.NET Core Security Feature Bypass VulnerabilityCVE-2023-38180ubuntudotnet6+16KEVEPSS score14.02%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2023-44487akkahttp_server+704KEVEPSS score100.00%
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.