Skip to content

Vulnerabilities of Microsoft ASP.NET Core 10.0

Is your version affected?

CVE Summary Score Published
CVE-2026-88092 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an… 9.4 Critical Oct 13, 2026
CVE-2026-96236 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 High Oct 13, 2026
CVE-2026-70196 Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network 5.9 Medium Oct 13, 2026
CVE-2026-70181 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 High Oct 13, 2026
CVE-2026-70183 Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an… 7.5 High Oct 13, 2026
CVE-2026-70175 Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network 8.1 High Oct 13, 2026
CVE-2026-70188 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an… 9.1 Critical Oct 13, 2026
CVE-2026-70186 Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-69304 Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny… 5.9 Medium Sep 8, 2026
CVE-2026-45591 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 High Jun 9, 2026
CVE-2026-40372 Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges… 9.1 Critical Apr 21, 2026
CVE-2026-26130 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 High Mar 10, 2026

Other Microsoft products