Product by Microsoft
Microsoft ASP.NET Core
44 known vulnerabilities in Microsoft ASP.NET Core (Microsoft), 2 of them actively exploited (CISA KEV).
Key figures
44
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products | 7.5 | |
| Critical | CVE-2023-38180 | .NET and Visual Studio Denial of Service Vulnerability In CISA KEValso in 9 other products | 7.5 | |
| Critical | CVE-2025-55315 | ASP.NET Security Feature Bypass Vulnerability | 9.9 | |
| Critical | CVE-2026-40372 | ASP.NET Core Elevation of Privilege Vulnerability | 9.1 | |
| High | CVE-2020-0603 | Microsoft ASP.NET Core: Remote Code Execution | 8.8 | |
| High | CVE-2018-0787 | Microsoft ASP.NET Core: Privilege Escalation | 8.8 | |
| High | CVE-2017-11879 | Microsoft ASP.NET Core: Privilege Escalation | 8.8 | |
| High | CVE-2018-0784 | Microsoft ASP.NET Core: Privilege Escalation | 8.8 | |
| High | CVE-2026-26130 | ASP.NET Core Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-45591 | ASP.NET Core Denial of Service Vulnerability | 7.5 | |
| High | CVE-2017-0247 | Microsoft ASP.NET Core: Denial of Service | 7.5 | |
| High | CVE-2018-8292 | Microsoft PowerShell Core: Information Disclosure | 7.5 | |
| High | CVE-2019-1302 | Microsoft ASP.NET Core: Privilege Escalation | 8.8 | |
| High | CVE-2018-8171 | Microsoft ASP.NET: Security Feature Bypass | 7.5 | |
| High | CVE-2017-8700 | Microsoft ASP.NET Core: Information Disclosure | 7.5 | |
| High | CVE-2018-0875 | Microsoft .NET Core: Denial of Service | 7.5 | |
| High | CVE-2019-0564 | Microsoft ASP.NET Core: Denial of Service | 7.5 | |
| High | CVE-2019-0548 | Microsoft ASP.NET Core: Denial of Service | 7.5 | |
| High | CVE-2018-0808 | Microsoft ASP.NET Core: Privilege Escalation | 7.5 | |
| High | CVE-2020-0602 | Microsoft ASP.NET Core: Denial of Service | 7.5 | |
| High | CVE-2019-0815 | Microsoft ASP.NET Core: Denial of Service | 7.5 | |
| High | CVE-2019-0982 | Microsoft ASP.NET Core: Denial of Service | 7.5 | |
| High | CVE-2020-1597 | ASP.NET Core Denial of Service Vulnerability | 7.5 | |
| High | CVE-2018-8409 | Microsoft System.IO.Pipelines: Denial of Service | 7.5 | |
| High | CVE-2020-1045 | Microsoft ASP.NET Core Security Feature Bypass Vulnerability | 7.5 |
News
- NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windowsncsc-nl,
- NCSC-2026-0351 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0184 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- Eurail Warns that Stolen Customer Data Was Leaked Onlinesans-newsbites-mail,
- ASP.NET <http://asp.net/> Core Vulnerable to Privilege Elevationsans-newsbites-mail,