VendorsMicrosoftasp.net_coreany version
Vulnerabilities

Microsoft Asp.net Core any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2025-55315
ASP.NET Security Feature Bypass Vulnerability
Published 2025-10-14 · Modified
9.91 PoCEPSS 0.659
CVE-2026-40372
ASP.NET Core Elevation of Privilege Vulnerability
Published 2026-04-21 · Modified
9.1EPSS 0.008
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published 2023-10-10 · Analyzed
7.5KEV1 PoCEPSS 1.000
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability
Published 2023-08-08 · Analyzed
7.5KEVEPSS 0.140
CVE-2018-8409
A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.
Published 2018-09-13 · Modified
7.5EPSS 0.066
CVE-2020-1045
Microsoft ASP.NET Core Security Feature Bypass Vulnerability
Published 2020-09-11 · Modified
7.5EPSS 0.059
CVE-2021-1723
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Published 2021-01-12 · Modified
7.5EPSS 0.049
CVE-2024-21404
.NET Denial of Service Vulnerability
Published 2024-02-13 · Modified
7.5EPSS 0.027
CVE-2026-26130
ASP.NET Core Denial of Service Vulnerability
Published 2026-03-10 · Modified
7.5EPSS 0.024
CVE-2026-45591
ASP.NET Core Denial of Service Vulnerability
Published 2026-06-09 · Modified
7.5EPSS 0.024
CVE-2024-21386
.NET Denial of Service Vulnerability
Published 2024-02-13 · Modified
7.5EPSS 0.024
CVE-2023-35391
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
Published 2023-08-08 · Modified
7.5EPSS 0.019
CVE-2025-26682
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Published 2025-04-08 · Analyzed
7.5EPSS 0.017
CVE-2025-24070
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Published 2025-03-11 · Analyzed
7.0EPSS 0.010
CVE-2023-36558
ASP.NET Core Security Feature Bypass Vulnerability
Published 2023-11-14 · Modified
6.2EPSS 0.011
CVE-2021-34532
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
Published 2021-08-12 · Modified
5.5EPSS 0.012