| CVE-2026-88092 | CRÍTICO9.4 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. | 13/10/2026 |
| CVE-2026-69304 | MEDIO5.9 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 08/09/2026 |
| CVE-2026-45591 | ALTO7.5 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 09/06/2026 |
| CVE-2026-40372 | CRÍTICO9.1 | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 21/04/2026 |
| CVE-2026-26130 | ALTO7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 10/03/2026 |
| CVE-2025-55315 | CRÍTICO9.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 14/10/2025 |
| CVE-2025-26682 | ALTO7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 08/04/2025 |
| CVE-2025-24070 | ALTO7.0 | Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 11/03/2025 |
| CVE-2024-21404 | ALTO7.5 | .NET Denial of Service Vulnerability | 13/02/2024 |
| CVE-2024-21386 | ALTO7.5 | .NET Denial of Service Vulnerability | 13/02/2024 |
| CVE-2023-36558 | MEDIO5.5 | ASP.NET Core Security Feature Bypass Vulnerability | 14/11/2023 |
| CVE-2023-36038 | ALTO7.5 | ASP.NET Core Denial of Service Vulnerability | 14/11/2023 |
| CVE-2023-44487KEV | ALTO7.5 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 10/10/2023 |
| CVE-2023-38180KEV | ALTO7.5 | .NET and Visual Studio Denial of Service Vulnerability | 08/08/2023 |
| CVE-2023-35391 | ALTO7.5 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | 08/08/2023 |
| CVE-2021-43877 | ALTO8.8 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | 15/12/2021 |
| CVE-2021-34532 | MEDIO5.5 | ASP.NET Core and Visual Studio Information Disclosure Vulnerability | 12/08/2021 |
| CVE-2021-1723 | ALTO7.5 | ASP.NET Core and Visual Studio Denial of Service Vulnerability | 12/01/2021 |
| CVE-2020-1045 | ALTO7.5 | <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p>
<p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p>
<p>The security update addresses the | 11/09/2020 |
| CVE-2020-1597 | ALTO7.5 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated att | 17/08/2020 |