| CVE-2026-96236 | 高7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-88092 | 緊急9.4 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. | 13/10/2026 |
| CVE-2026-70196 | 中5.9 | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-70188 | 緊急9.1 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. | 13/10/2026 |
| CVE-2026-70186 | 高7.5 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-70183 | 高7.5 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-70181 | 高7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-70175 | 高8.1 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-56170 | 高7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-45591 | 高7.5 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 09/06/2026 |
| CVE-2026-42899 | 高7.5 | Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 12/05/2026 |
| CVE-2026-26130 | 高7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 10/03/2026 |
| CVE-2025-55315 | 緊急9.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 14/10/2025 |
| CVE-2025-24070 | 高7.0 | Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 11/03/2025 |
| CVE-2024-38229 | 高8.1 | .NET and Visual Studio Remote Code Execution Vulnerability | 08/10/2024 |
| CVE-2024-35264 | 高8.1 | .NET and Visual Studio Remote Code Execution Vulnerability | 09/07/2024 |
| CVE-2024-30046 | 中5.9 | Visual Studio Denial of Service Vulnerability | 14/05/2024 |
| CVE-2024-21386 | 高7.5 | .NET Denial of Service Vulnerability | 13/02/2024 |
| CVE-2023-33170 | 高8.1 | ASP.NET and Visual Studio Security Feature Bypass Vulnerability | 11/07/2023 |
| CVE-2022-38013 | 高7.5 | .NET Core and Visual Studio Denial of Service Vulnerability | 13/09/2022 |