Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-25667

Denial of Service via crafted QUIC packet in ASP.NET Core Kestrel

ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for HTTP/3 Encoder/Decoder stream processing.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Microsoft
Products
.net Aspnetcore
CVE-2025-7326

EOL ASP.NET Core Elevation of Privilege Vulnerability

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Aspnetcore
CVE-2017-11770

Core: DoS via bad certificate

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".

CVSS 3.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Microsoft Redhat
Products
Aspnetcore Rhel Dotnet
CVE-2017-11883

Core: DoS due to improper handling of web requests

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".

CVSS 3.0 · 7.5 High EPSS 8.5% KEV · Not listed
Vendors
Microsoft
Products
Aspnetcore