Microsoft ASP.NET Core vulnerabilities

CVEs per yearBy the year they were published

1. 20183
2. 20196
3. 20202

Newest CVEs

• CVE-2020-0603

  A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully…

  Microsoft · ASP.NET Core

  High8.8
• CVE-2020-0602

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

  Microsoft · ASP.NET Core

  High7.5
• CVE-2019-1302

  An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web…

  Microsoft · ASP.NET Core

  High8.8
• CVE-2019-1075

  A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

  Microsoft · ASP.NET Core

  Medium6.1
• CVE-2019-0982

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

  Microsoft · ASP.NET Core

  High7.5
• CVE-2019-0815

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

  Microsoft · ASP.NET Core

  High7.5
• CVE-2019-0564

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects…

  Microsoft · ASP.NET Core

  High7.5
• CVE-2019-0548

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects…

  Microsoft · ASP.NET Core

  High7.5
• CVE-2018-8409

  A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET…

  Microsoft · System.IO.Pipelines

  High7.5
• CVE-2018-8356

  A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security…

  Microsoft · Microsoft .NET Framework

  Medium5.5