NuGetPackage

Microsoft.NETCore.App.Runtime.osx-x64

30 known vulnerabilities (1 critical, 20 high, 8 medium), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 30 · 1 critical, 20 high, 8 medium

Registry: NuGet

Advisories 30

GHSA-P3JP-9V83-76W9High
Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability
Affected: from 8.0.0, fixed in 8.0.33; from 9.0.0, fixed in 9.0.22; from 10.0.0, fixed in 10.0.14; from 11.0.0-preview.1, fixed in 11.0.0-rc.3.26522.148.
CVE-2026-50659Medium 6.5
.NET Spoofing Vulnerability
Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.
CVE-2026-50651High 7.5
.NET Denial of Service Vulnerability
Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.
CVE-2026-50528High 8.2
.NET Security Feature Bypass Vulnerability
Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.
CVE-2026-50524High 7.5
.NET Framework Denial of Service Vulnerability
Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.
CVE-2026-47302High 7.5
.NET Denial of Service Vulnerability
Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.
CVE-2026-57108High 7.5
.NET Denial of Service Vulnerability
Affected: from 10.0.0, fixed in 10.0.10; from 9.0.0, fixed in 9.0.18; from 8.0.0, fixed in 8.0.29.
CVE-2026-32178High 7.5
.NET Spoofing Vulnerability
Affected: from 10.0.0, fixed in 10.0.6; from 9.0.0, fixed in 9.0.15; from 8.0.0, fixed in 8.0.26.
CVE-2026-26127High 7.5
.NET Denial of Service Vulnerability
Affected: from 9.0.0, fixed in 9.0.14; from 10.0.0, fixed in 10.0.4.
CVE-2025-55248Medium 4.8
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
Affected: from 9.0.0, fixed in 9.0.10; from 8.0.0, fixed in 8.0.21.
CVE-2025-30399High 7.5
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 9.0.0, fixed in 9.0.6; from 8.0.0, fixed in 8.0.17.
CVE-2020-36846Critical 9.8
IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library
Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.
CVE-2025-21172High 7.5
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 9.0.0, fixed in 9.0.1; from 8.0.0, fixed in 8.0.12.
CVE-2025-21176High 8.8
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
Affected: from 9.0.0, fixed in 9.0.1; from 8.0.0, fixed in 8.0.12.
CVE-2025-21171High 7.5
.NET Remote Code Execution Vulnerability
Affected: from 9.0.0, fixed in 9.0.1.

Show all 30 advisoriesShow fewer advisories

CVE-2024-38167Medium 6.5
.NET and Visual Studio Information Disclosure Vulnerability
Affected: from 8.0.0, fixed in 8.0.8.
CVE-2024-38095High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 8.0.0, fixed in 8.0.7; from 6.0.0, fixed in 6.0.32.
CVE-2024-30045Medium 6.3
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 7.0.0, fixed in 7.0.19; from 8.0.0, fixed in 8.0.5.
CVE-2024-21392High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 8.0.0, fixed in 8.0.3; from 7.0.0-preview.1.22076.8, fixed in 7.0.17.
CVE-2023-29331High 7.5
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Affected: from 6.0.0, fixed in 6.0.18; from 7.0.0, fixed in 7.0.7.
CVE-2023-24936High 7.5
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
Affected: from 7.0.0, fixed in 7.0.7; from 6.0.0, fixed in 6.0.18.
CVE-2023-33128High 7.3
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 7.0.0, fixed in 7.0.7.
CVE-2023-21538High 7.5
.NET Denial of Service Vulnerability
Affected: from 6.0.0, fixed in 6.0.13.
CVE-2022-24512Medium 6.3
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.
CVE-2021-34485Medium 5.0
.NET Core and Visual Studio Information Disclosure Vulnerability
Affected: from 3.1.0, fixed in 3.1.18; from 5.0.0, fixed in 5.0.9.
CVE-2021-26423High 7.5
.NET Core and Visual Studio Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.18; from 5.0.0, fixed in 5.0.9.
CVE-2021-1721Medium 6.5
.NET Core and Visual Studio Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.12; from 5.0.0, fixed in 5.0.3.
CVE-2020-8927Medium 5.3
Buffer overflow in Brotli library
Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.
CVE-2020-1147High 7.8 · KEV
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the
Affected: from 3.1.0, fixed in 3.1.6.
CVE-2020-1108Unrated
.NET Core & .NET Framework Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.4.