Veille CVE

Mercredi 14 octobre 2026

6 CVE

Critique 1 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft ASP.NET Core 10.0 » ✕
  1. CVE-2026-70188 9.1 Critique

    Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0

    Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

  2. CVE-2026-70183 7.5 Élevée

    Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0

    Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

  3. CVE-2026-70175 8.1 Élevée

    Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14

    Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

  4. CVE-2026-70196 5.9 Moyenne

    Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14

    Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  5. CVE-2026-70186 7.5 Élevée

    Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14

    Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  6. CVE-2026-70181 7.5 Élevée

    Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.