ASP.NET Core security vulnerabilities
Developer framework / library. Public CVE monitoring for ASP.NET Core. Vendor security advisories are linked on this page.
Built for Operators of this product.
20 public records · 0 security-fix timeline events. 0 published in the last 7 days. 12 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 2
- High 7
- Medium 0
- Low 0
2026-08-119 issues2026-11-08
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- High7.8ASP.NET Core Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.36%Oct 25, 2026
- High7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 0.95%Oct 15, 2026
- Critical9.4Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.93%Oct 13, 2026
- Critical9.1Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.94%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution VulnerabilityCheck if you run itEPSS 0.91%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityCheck if you run itEPSS 0.95%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 0.96%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.63%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 1.09%Oct 13, 2026
- High7.5Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 2.43%May 12, 2026