Recherche « Microsoft ASP.NET Core 8.0 »
13 CVE
-
CVE-2026-96236 7.5 Élevée
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96233 7.5 Élevée
Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-88092 9.4 Critique
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
-
CVE-2026-70196 5.9 Moyenne
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-70188 9.1 Critique
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
-
CVE-2026-70186 7.5 Élevée
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-70183 7.5 Élevée
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-70181 7.5 Élevée
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-70175 8.1 Élevée
Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-69304 5.9 Moyenne
Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft ASP.NET Core 10.0
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-47303 8.8 Élevée
Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.12
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-47300 8.8 Élevée
Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.12
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-56170 7.5 Élevée
Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .net
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.