Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAsp.Net Core (bb6bee6e-6b53-54e5-b686-7064a986b51d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40372 vulnerable 2026-06-08 08:01:20.403534 ASP.NET Core Elevation of Privilege Vulnerability
CRITICAL (9.1)
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-04-21T19:20:50.215Z
Updated: 2026-07-15T02:45:28.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26130 vulnerable 2026-06-08 07:53:20.996274 ASP.NET Core Denial of Service Vulnerability
HIGH (7.5)
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published: 2026-03-10T17:05:22.367Z
Updated: 2026-07-15T01:15:21.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55315 vulnerable 2026-06-08 07:33:14.606649 ASP.NET Security Feature Bypass Vulnerability
CRITICAL (9.9)
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Published: 2025-10-14T17:00:10.371Z
Updated: 2026-02-22T17:24:12.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26682 vulnerable 2026-06-08 07:14:50.259099 ASP.NET Core and Visual Studio Denial of Service Vulnerability
HIGH (7.5)
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published: 2025-04-08T17:24:22.748Z
Updated: 2026-02-13T19:33:38.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24070 vulnerable 2026-06-08 07:12:48.030870 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
HIGH (7)
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Published: 2025-03-11T16:58:54.453Z
Updated: 2026-02-13T19:38:35.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21404 vulnerable 2026-06-08 06:27:32.975714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21386 vulnerable 2026-06-08 06:27:32.942416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44487 vulnerable 2026-06-08 06:12:41.170680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38180 vulnerable 2026-06-08 06:08:17.164791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36558 vulnerable 2026-06-08 06:08:12.303537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36038 vulnerable 2026-06-08 06:06:28.448910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35391 vulnerable 2026-06-08 06:06:27.320505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34532 vulnerable 2026-06-08 05:32:13.725614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1723 vulnerable 2026-06-08 05:29:02.516264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1161 vulnerable 2026-06-08 05:20:58.588624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1045 vulnerable 2026-06-08 05:20:57.877524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0603 vulnerable 2026-06-08 05:16:32.359671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0602 vulnerable 2026-06-08 05:16:32.355073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1302 vulnerable 2026-06-08 05:13:25.572340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1075 vulnerable 2026-06-08 05:13:24.710296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0982 vulnerable 2026-06-08 05:12:21.269596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0815 vulnerable 2026-06-08 05:12:20.759488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0564 vulnerable 2026-06-08 05:12:20.011259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0548 vulnerable 2026-06-08 05:12:19.966047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8409 vulnerable 2026-06-08 05:12:05.852339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8356 vulnerable 2026-06-08 05:12:05.690369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8171 vulnerable 2026-06-08 05:12:05.364095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.