NuGetPackage

Microsoft.AspNetCore.App.Runtime.win-arm

25 known vulnerabilities (1 critical, 18 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 25 · 1 critical, 18 high, 2 medium

Registry: NuGet

Advisories 25

CVE-2026-56170High 7.5
ASP.NET Core Denial of Service Vulnerability
Affected: from 10.0.0, fixed in 10.0.6; from 9.0.0, fixed in 9.0.15; from 8.0.0, fixed in 8.0.26.
CVE-2026-42899High 7.5
ASP.NET Core Denial of Service Vulnerability
Affected: from 8.0.0, fixed in 8.0.27; from 9.0.0, fixed in 9.0.16; from 10.0.0, fixed in 10.0.8.
CVE-2026-26130High 7.5
ASP.NET Core Denial of Service Vulnerability
Affected: from 8.0.0, fixed in 8.0.25; from 9.0.0, fixed in 9.0.14; from 10.0.0, fixed in 10.0.4.
CVE-2025-55315Critical 9.9
ASP.NET Security Feature Bypass Vulnerability
Affected: from 10.0.0-rc.1.25451.107, fixed in 10.0.0-rc.2.25502.107; from 9.0.0, fixed in 9.0.10; from 8.0.0, fixed in 8.0.21.
CVE-2025-24070High 7.0
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Affected: from 8.0.0, fixed in 8.0.14; from 9.0.0, fixed in 9.0.3; from 6.0.0, through 6.0.36.
CVE-2024-38229High 8.1
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 9.0.0-preview.1.24081.5, fixed in 9.0.0-rc.2.24474.3; from 8.0.0, fixed in 8.0.10.
CVE-2024-38168High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 8.0.0, fixed in 8.0.8.
CVE-2024-35264High 8.1
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 8.0.0, fixed in 8.0.7.
CVE-2024-30046Medium 5.9
Visual Studio Denial of Service Vulnerability
Affected: from 7.0.0, fixed in 7.0.19; from 8.0.0, fixed in 8.0.5.
CVE-2024-21386High 7.5
.NET Denial of Service Vulnerability
Affected: fixed in 6.0.27; from 7.0.0, fixed in 7.0.16; from 8.0.0, fixed in 8.0.2.
CVE-2023-38178High 7.5
.NET Core and Visual Studio Denial of Service Vulnerability
Affected: from 7.0.0, fixed in 7.0.10.
CVE-2023-33170High 8.1
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
Affected: fixed in 6.0.20; from 7.0.0, fixed in 7.0.9.
CVE-2022-38013High 7.5
.NET Core and Visual Studio Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.29; from 5.0.0, fixed in 6.0.9.
CVE-2022-34716Medium 5.9
.NET Spoofing Vulnerability
Affected: from 3.1.0, fixed in 3.1.28; from 6.0.0, fixed in 6.0.8.
CVE-2022-29145High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.25; from 5.0.0, fixed in 5.0.17; from 6.0.0, fixed in 6.0.5.

Show all 25 advisoriesShow fewer advisories

CVE-2022-29117High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.25; from 5.0.0, fixed in 5.0.17; from 6.0.0, fixed in 6.0.5.
CVE-2022-23267High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.25; from 5.0.0, fixed in 5.0.17; from 6.0.0, fixed in 6.0.5.
CVE-2022-24464High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.
CVE-2022-21986High 7.5
.NET Denial of Service Vulnerability
Affected: from 5.0.0, fixed in 5.0.14; from 6.0.0, fixed in 6.0.2.
CVE-2021-1723High 7.5
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.11; from 5.0.0, fixed in 5.0.2.
CVE-2020-1045High 7.5
Microsoft ASP.NET Core Security Feature Bypass Vulnerability
Affected: from 3.1.0, fixed in 3.1.8.
CVE-2020-1597Unrated
ASP.NET Core Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.7.
CVE-2020-1161Unrated
ASP.NET Core Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.4.
CVE-2020-0603Unrated
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who…
Affected: from 3.1.0, fixed in 3.1.1.
CVE-2020-0602Unrated
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service…
Affected: from 3.1.0, fixed in 3.1.1.