AC
Product
Asp.net Core
On CISA KEVExploited in the wild
41
CVEs
2
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 3High 31Medium 7Low 0
Watch
Add Asp.net Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55315 | 9.9 | Oct 14 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network Affected: 2.3.0 before 2.3.6; 8.0.0 before 8.0.21; 9.0.0 before 9.0.10 |
| CVE-2026-88092 | 9.4 | Oct 13 | ASP.NET Core Tampering Vulnerability Affected: 8.0.0 before 8.0.32; 9.0.0 before 9.0.21; 10.0.0 before 10.0.13; after 11.0.0 and later; 11.0 |
| CVE-2026-40372 | 9.1 | Apr 21 | ASP.NET Core Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.7 |
Showing 3