ASP.NET Core · week of 2 Nov 2026

ASP.NET Core security note

Records on this stack that changed between 2 Nov 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.

What changed

CVE-2021-43877 — Check if you run it
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Seen in 3.1 · 3 other packages on the advisory
CVE-2021-34532 — Check if you run it
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
Affected <= 2.1.2

What we still do not know

Every changed record in this note has a version range.

Share this note

ASP.NET Core security note, week of 2 Nov 2026: 2 records have a version a customer can check, and 0 still do not. https://zerodayfindings.com/technologies/aspnet/notes/2026-W45