CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 13/10/2026 |
| CVE-2026-70186 | ÉLEVÉE7.5 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-70183 | ÉLEVÉE7.5 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-70181 | ÉLEVÉE7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-70175 | ÉLEVÉE8.1 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-56170 | ÉLEVÉE7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-45591 | ÉLEVÉE7.5 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 09/06/2026 |
| CVE-2026-42899 | ÉLEVÉE7.5 | Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 12/05/2026 |
| CVE-2026-26130 | ÉLEVÉE7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 10/03/2026 |
| CVE-2025-55315 | CRITIQUE9.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 14/10/2025 |
| CVE-2025-24070 | ÉLEVÉE7.0 | Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 11/03/2025 |
| CVE-2024-38229 | ÉLEVÉE8.1 | .NET and Visual Studio Remote Code Execution Vulnerability | 08/10/2024 |
| CVE-2024-38168 | ÉLEVÉE7.5 | .NET and Visual Studio Denial of Service Vulnerability | 13/08/2024 |
| CVE-2024-35264 | ÉLEVÉE8.1 | .NET and Visual Studio Remote Code Execution Vulnerability | 09/07/2024 |
| CVE-2024-30046 | MOYENNE5.9 | Visual Studio Denial of Service Vulnerability | 14/05/2024 |
| CVE-2024-21386 | ÉLEVÉE7.5 | .NET Denial of Service Vulnerability | 13/02/2024 |
| CVE-2023-38180KEV | ÉLEVÉE7.5 | .NET and Visual Studio Denial of Service Vulnerability | 08/08/2023 |