Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:asp.net_core_9.0:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAsp.Net Core 9.0 (03aa74fb-1a14-5b37-82ed-d71784eee2d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-69304 vulnerable 2026-09-16 04:34:19.960140 ASP.NET Core Denial of Service Vulnerability
MEDIUM (5.9)
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published: 2026-09-08T17:17:47.686Z
Updated: 2026-09-18T20:45:19.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-45591 vulnerable 2026-07-29 00:52:15.667581 ASP.NET Core Denial of Service Vulnerability
HIGH (7.5)
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published: 2026-06-09T17:05:29.575Z
Updated: 2026-08-25T22:43:51.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26130 vulnerable 2026-06-08 07:53:20.995479 ASP.NET Core Denial of Service Vulnerability
HIGH (7.5)
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published: 2026-03-10T17:05:22.367Z
Updated: 2026-07-15T01:15:21.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55315 vulnerable 2026-06-08 07:33:14.600682 ASP.NET Security Feature Bypass Vulnerability
CRITICAL (9.9)
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Published: 2025-10-14T17:00:10.371Z
Updated: 2026-02-22T17:24:12.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26682 vulnerable 2026-06-08 07:14:50.257090 ASP.NET Core and Visual Studio Denial of Service Vulnerability
HIGH (7.5)
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published: 2025-04-08T17:24:22.748Z
Updated: 2026-08-10T15:13:20.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24070 vulnerable 2026-06-08 07:12:48.025872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.