# Microsoft.NETCore.App.Runtime.linux-x64 (NuGet) vulnerabilities

33 known vulnerabilities (1 critical, 21 high, 10 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.linux-x64

## Advisories (33)

### [GHSA-P3JP-9V83-76W9](https://cve.now/GHSA-P3JP-9V83-76W9): Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability

- Severity: High
- Published: Nov 3, 2026
- Affected: from 8.0.0, fixed in 8.0.33; from 9.0.0, fixed in 9.0.22; from 10.0.0, fixed in 10.0.14; from 11.0.0-preview.1, fixed in 11.0.0-rc.3.26522.148.

### [CVE-2026-50659](https://cve.now/CVE-2026-50659): .NET Spoofing Vulnerability

- Severity: Medium 6.5
- Published: Jul 14, 2026
- Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.

### [CVE-2026-50651](https://cve.now/CVE-2026-50651): .NET Denial of Service Vulnerability

- Severity: High 7.5
- Published: Jul 14, 2026
- Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.

### [CVE-2026-50528](https://cve.now/CVE-2026-50528): .NET Security Feature Bypass Vulnerability

- Severity: High 8.2
- Published: Jul 14, 2026
- Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.

### [CVE-2026-50524](https://cve.now/CVE-2026-50524): .NET Framework Denial of Service Vulnerability

- Severity: High 7.5
- Published: Jul 14, 2026
- Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.

### [CVE-2026-47302](https://cve.now/CVE-2026-47302): .NET Denial of Service Vulnerability

- Severity: High 7.5
- Published: Jul 14, 2026
- Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.

### [CVE-2026-57108](https://cve.now/CVE-2026-57108): .NET Denial of Service Vulnerability

- Severity: High 7.5
- Published: Jul 14, 2026
- Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.

### [CVE-2026-45491](https://cve.now/CVE-2026-45491): .NET Tampering Vulnerability

- Severity: Medium 6.2
- Published: Jun 9, 2026
- Affected: from 8.0.0, fixed in 8.0.28; from 9.0.0, fixed in 9.0.17; from 10.0.0, fixed in 10.0.9.

### [CVE-2026-32178](https://cve.now/CVE-2026-32178): .NET Spoofing Vulnerability

- Severity: High 7.5
- Published: Apr 14, 2026
- Affected: from 10.0.0, fixed in 10.0.6; from 9.0.0, fixed in 9.0.15; from 8.0.0, fixed in 8.0.26.

### [CVE-2026-26127](https://cve.now/CVE-2026-26127): .NET Denial of Service Vulnerability

- Severity: High 7.5
- Published: Mar 10, 2026
- Affected: from 9.0.0, fixed in 9.0.14; from 10.0.0, fixed in 10.0.4.

### [CVE-2026-26131](https://cve.now/CVE-2026-26131): .NET Elevation of Privilege Vulnerability

- Severity: High 7.8
- Published: Mar 10, 2026
- Affected: from 10.0.0, fixed in 10.0.4.

### [CVE-2025-55248](https://cve.now/CVE-2025-55248): .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

- Severity: Medium 4.8
- Published: Oct 14, 2025
- Affected: from 9.0.0, fixed in 9.0.10; from 8.0.0, fixed in 8.0.21.

### [CVE-2025-30399](https://cve.now/CVE-2025-30399): .NET and Visual Studio Remote Code Execution Vulnerability

- Severity: High 7.5
- Published: Jun 13, 2025
- Affected: from 9.0.0, fixed in 9.0.6; from 8.0.0, fixed in 8.0.17.

### [CVE-2020-36846](https://cve.now/CVE-2020-36846): IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library

- Severity: Critical 9.8
- Published: May 30, 2025
- Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.

### [CVE-2025-21172](https://cve.now/CVE-2025-21172): .NET and Visual Studio Remote Code Execution Vulnerability

- Severity: High 7.5
- Published: Jan 14, 2025
- Affected: from 9.0.0, fixed in 9.0.1; from 8.0.0, fixed in 8.0.12.

### [CVE-2025-21176](https://cve.now/CVE-2025-21176): .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

- Severity: High 8.8
- Published: Jan 14, 2025
- Affected: from 9.0.0, fixed in 9.0.1; from 8.0.0, fixed in 8.0.12.

### [CVE-2025-21171](https://cve.now/CVE-2025-21171): .NET Remote Code Execution Vulnerability

- Severity: High 7.5
- Published: Jan 14, 2025
- Affected: from 9.0.0, fixed in 9.0.1.

### [CVE-2024-38167](https://cve.now/CVE-2024-38167): .NET and Visual Studio Information Disclosure Vulnerability

- Severity: Medium 6.5
- Published: Aug 13, 2024
- Affected: from 8.0.0, fixed in 8.0.8.

### [CVE-2024-38095](https://cve.now/CVE-2024-38095): .NET and Visual Studio Denial of Service Vulnerability

- Severity: High 7.5
- Published: Jul 9, 2024
- Affected: from 8.0.0, fixed in 8.0.7; from 6.0.0, fixed in 6.0.32.

### [CVE-2024-30045](https://cve.now/CVE-2024-30045): .NET and Visual Studio Remote Code Execution Vulnerability

- Severity: Medium 6.3
- Published: May 14, 2024
- Affected: from 7.0.0, fixed in 7.0.19; from 8.0.0, fixed in 8.0.5.

### [CVE-2024-21392](https://cve.now/CVE-2024-21392): .NET and Visual Studio Denial of Service Vulnerability

- Severity: High 7.5
- Published: Mar 12, 2024
- Affected: from 8.0.0, fixed in 8.0.3; from 7.0.0-preview.1.22076.8, fixed in 7.0.17.

### [CVE-2023-36799](https://cve.now/CVE-2023-36799): .NET Core and Visual Studio Denial of Service Vulnerability

- Severity: Medium 6.5
- Published: Sep 12, 2023
- Affected: from 7.0.0, fixed in 7.0.11; from 6.0.0, fixed in 6.0.22.

### [CVE-2023-29331](https://cve.now/CVE-2023-29331): .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

- Severity: High 7.5
- Published: Jun 14, 2023
- Affected: from 6.0.0, fixed in 6.0.18; from 7.0.0, fixed in 7.0.7.

### [CVE-2023-24936](https://cve.now/CVE-2023-24936): .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

- Severity: High 7.5
- Published: Jun 14, 2023
- Affected: from 7.0.0, fixed in 7.0.7; from 6.0.0, fixed in 6.0.18.

### [CVE-2023-33128](https://cve.now/CVE-2023-33128): .NET and Visual Studio Remote Code Execution Vulnerability

- Severity: High 7.3
- Published: Jun 13, 2023
- Affected: from 7.0.0, fixed in 7.0.7.

### [CVE-2023-21538](https://cve.now/CVE-2023-21538): .NET Denial of Service Vulnerability

- Severity: High 7.5
- Published: Jan 10, 2023
- Affected: from 6.0.0, fixed in 6.0.13.

### [CVE-2022-24512](https://cve.now/CVE-2022-24512): .NET and Visual Studio Remote Code Execution Vulnerability

- Severity: Medium 6.3
- Published: Mar 9, 2022
- Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.

### [CVE-2021-34485](https://cve.now/CVE-2021-34485): .NET Core and Visual Studio Information Disclosure Vulnerability

- Severity: Medium 5.0
- Published: Aug 12, 2021
- Affected: from 3.1.0, fixed in 3.1.18; from 5.0.0, fixed in 5.0.9.

### [CVE-2021-26423](https://cve.now/CVE-2021-26423): .NET Core and Visual Studio Denial of Service Vulnerability

- Severity: High 7.5
- Published: Aug 12, 2021
- Affected: from 3.1.0, fixed in 3.1.18; from 5.0.0, fixed in 5.0.9.

### [CVE-2021-1721](https://cve.now/CVE-2021-1721): .NET Core and Visual Studio Denial of Service Vulnerability

- Severity: Medium 6.5
- Published: Feb 25, 2021
- Affected: from 3.1.0, fixed in 3.1.12; from 5.0.0, fixed in 5.0.3.

### [CVE-2020-8927](https://cve.now/CVE-2020-8927): Buffer overflow in Brotli library

- Severity: Medium 5.3
- Published: Sep 15, 2020
- Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.

### [CVE-2020-1147](https://cve.now/CVE-2020-1147): A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the

- Severity: High 7.8 · KEV
- Published: Jul 14, 2020
- Affected: from 3.1.0, fixed in 3.1.6.

### [CVE-2020-1108](https://cve.now/CVE-2020-1108): .NET Core & .NET Framework Denial of Service Vulnerability

- Severity: Unrated
- Published: May 21, 2020
- Affected: from 3.1.0, fixed in 3.1.4.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/nuget/microsoft.netcore.app.runtime.linux-x64
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.