Microsoft Microsoft.Aspnetcore.App.Runtime.Linux-Arm vulnerabilities

CVE-2025-55315 [CRITICAL] CWE-444 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability # Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 10.0 , ASP.NET Core 9.0 , ASP.NET Core 8.0, and ASP.NET Core 2.3. This a

CVE-2020-0603 [HIGH] CWE-119 Remote code execution in ASP.NET Core Remote code execution in ASP.NET Core A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.

CVE-2026-88092 [CRITICAL] CWE-444 Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerab

CVE-2026-70188 [CRITICAL] CWE-444 Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerab

CVE-2026-70175 [HIGH] CWE-640 Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI. This advisory also provides guidance on what developers can do to update their applications to

CVE-2024-35264 [HIGH] CWE-416 Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability # Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0. This advisory also provides guidance on what developers can do to update their app

CVE-2024-38229 [HIGH] CWE-416 CVE-2024-38229: .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability

CVE-2026-70183 [HIGH] CWE-362 Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.Authorization. This advisory also provides guidance on what developers can do to update their applications to remove this vulnera

CVE-2026-26130 [HIGH] CWE-770 .NET Denial of Service Vulnerability .NET Denial of Service Vulnerability # Microsoft Security Advisory CVE-2026-26130 – .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service vulnerability ex

CVE-2026-42899 [HIGH] CWE-835 Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability ## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Loop with unre

CVE-2023-33170 [HIGH] CWE-362 Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability # Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 2.1 and above. This advisory also provides guidance on what developers can d

CVE-2026-70181 [HIGH] CWE-770 Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. FileBufferingRe

CVE-2026-56170 [HIGH] CWE-770 Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability # Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR (Microsoft.AspNetCore.App.Runtime). This advisory also provides guidance on what de

CVE-2026-70186 [HIGH] CWE-833 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unaut

CVE-2026-96236 [HIGH] CWE-770 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Localization. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. ASP.NET Core re

CVE-2020-1597 [HIGH] CWE-20 ASP.NET Core Denial of Service Vulnerability ASP.NET Core Denial of Service Vulnerability A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka `ASP.NET Core Denial of Service Vulnerability`.

CVE-2020-1045 [HIGH] Cookie parsing failure Cookie parsing failure A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Featur

CVE-2020-1161 [HIGH] CWE-20 ASP.NET Core Denial of Service Vulnerability ASP.NET Core Denial of Service Vulnerability A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

CVE-2025-24070 [HIGH] CWE-1390 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability # Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 9.0, ASP.NET Core 8.0, ASP.NET Core 6.0, and ASP.NET Core 2.3. This advisory a

CVE-2025-7326 [HIGH] CWE-1390 CVE-2025-7326: Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.