CVE-2018-8416: Microsoft ASP.NET Core

Medium severity, CVSS 6.5. EPSS: 7.3% chance of exploitation in the next 30 days.

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

Affected products

• Microsoft ASP.NET Core: version 2.1 only

Published 2018-11-14. Last modified 2026-06-17.