Microsoft Asp.Net Core vulnerabilities

CVE-2019-0564 [HIGH] CVE-2019-0564: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

CVE-2018-0875 [HIGH] CVE-2018-0875: .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulne .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

CVE-2019-0548 [HIGH] CWE-19 CVE-2019-0548: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.

CVE-2020-0602 [HIGH] CVE-2020-0602: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

CVE-2025-24070 [HIGH] CWE-1390 CVE-2025-24070: Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate p Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2019-0815 [HIGH] CWE-19 CVE-2019-0815: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

CVE-2019-0982 [HIGH] CWE-19 CVE-2019-0982: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

CVE-2018-8416 [MEDIUM] CVE-2018-8416: A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NE A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

CVE-2023-35391 [HIGH] CVE-2023-35391: ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

CVE-2021-43877 [HIGH] CVE-2021-43877: ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

CVE-2018-8409 [HIGH] CVE-2018-8409: A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka " A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

CVE-2021-1723 [HIGH] CVE-2021-1723: ASP.NET Core and Visual Studio Denial of Service Vulnerability ASP.NET Core and Visual Studio Denial of Service Vulnerability

CVE-2026-69304 [MEDIUM] CWE-409 CVE-2026-69304: Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthori Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2018-0785 [MEDIUM] CWE-352 CVE-2018-0785: ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET C ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".

CVE-2019-1075 [MEDIUM] CWE-601 CVE-2019-1075: A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Co A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

CVE-2023-36558 [MEDIUM] CVE-2023-36558: ASP.NET Core Security Feature Bypass Vulnerability ASP.NET Core Security Feature Bypass Vulnerability

CVE-2021-34532 [MEDIUM] CVE-2021-34532: ASP.NET Core and Visual Studio Information Disclosure Vulnerability ASP.NET Core and Visual Studio Information Disclosure Vulnerability

CVE-2018-8356 [MEDIUM] CWE-295 CVE-2018-8356: A security feature bypass vulnerability exists when Microsoft .NET Framework components do not corre A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, AS