Aller au contenu

Vulnérabilités de Microsoft ASP.NET Core 9.0

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-88092 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an… 9.4 Critique 13 oct. 2026
CVE-2026-96236 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 13 oct. 2026
CVE-2026-70196 Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network 5.9 Moyenne 13 oct. 2026
CVE-2026-70181 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 13 oct. 2026
CVE-2026-70183 Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an… 7.5 Élevée 13 oct. 2026
CVE-2026-70175 Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network 8.1 Élevée 13 oct. 2026
CVE-2026-70188 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an… 9.1 Critique 13 oct. 2026
CVE-2026-70186 Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 Élevée 13 oct. 2026
CVE-2026-69304 Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny… 5.9 Moyenne 8 sept. 2026
CVE-2026-45591 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 Élevée 9 juin 2026
CVE-2026-26130 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 10 mars 2026
CVE-2025-55315 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized… 9.9 Critique 14 oct. 2025
CVE-2025-26682 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 8 avr. 2025
CVE-2025-24070 Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a… 7.0 Élevée 11 mars 2025

Autres produits Microsoft