Known vulnerabilities and malicious package reports for Microsoft.AspNetCore.App.Runtime.osx-arm64 on NuGet, live from OSV, with CISA KEV exploitation status and EPSS scores.
0 malicious package reports and 25 vulnerabilities returned by OSV. Check a specific version to see which reports apply.
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0-rc.1.25451.107, fixed 10.0.0-rc.2.25502.107; introduced 9.0.0, fixed 9.0.10; introduced 8.0.0, fixed 8.0.21.
Fix versions reported by the advisory: 10.0.0-rc.2.25502.107, 9.0.10, 8.0.21.
Severity: CRITICAL.
.NET Denial of Service Vulnerability
Published .
Updated .
Reported affected releases: 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4.
Affected ranges: introduced 6.0.0, fixed 6.0.5.
Fix versions reported by the advisory: 6.0.5.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Reported affected releases: 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4.
Affected ranges: introduced 6.0.0, fixed 6.0.5.
Fix versions reported by the advisory: 6.0.5.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Reported affected releases: 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8.
Affected ranges: introduced 5.0.0, fixed 6.0.9.
Fix versions reported by the advisory: 6.0.9.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Reported affected releases: 6.0.0, 6.0.1.
Affected ranges: introduced 6.0.0, fixed 6.0.2.
Fix versions reported by the advisory: 6.0.2.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Reported affected releases: 6.0.0, 6.0.1, 6.0.2.
Affected ranges: introduced 6.0.0, fixed 6.0.3.
Fix versions reported by the advisory: 6.0.3.
Severity: HIGH.
Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability
Published .
Updated .
Reported affected releases: 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6.
Affected ranges: introduced 8.0.0, fixed 8.0.7.
Fix versions reported by the advisory: 8.0.7.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.25; introduced 9.0.0, fixed 9.0.14; introduced 10.0.0, fixed 10.0.4.
Fix versions reported by the advisory: 8.0.25, 9.0.14, 10.0.4.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.28; introduced 9.0.0, fixed 9.0.17; introduced 10.0.0, fixed 10.0.9.
Fix versions reported by the advisory: 8.0.28, 9.0.17, 10.0.9.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.27; introduced 9.0.0, fixed 9.0.16; introduced 10.0.0, fixed 10.0.8.
Fix versions reported by the advisory: 8.0.27, 9.0.16, 10.0.8.
Severity: HIGH.
.NET Information Disclosure Vulnerability
Published .
Updated .
Reported affected releases: 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7.
Affected ranges: introduced 6.0.0, fixed 6.0.8.
Fix versions reported by the advisory: 6.0.8.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 0, fixed 6.0.27; introduced 7.0.0, fixed 7.0.16; introduced 8.0.0, fixed 8.0.2.
Fix versions reported by the advisory: 6.0.27, 7.0.16, 8.0.2.
Severity: HIGH.
Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability
Published .
Updated .
Reported affected releases: 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8.
Affected ranges: introduced 9.0.0-preview.1.24081.5, fixed 9.0.0-rc.2.24474.3; introduced 8.0.0, fixed 8.0.10.
Fix versions reported by the advisory: 9.0.0-rc.2.24474.3, 8.0.10.
Severity: HIGH.
Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability
Published .
Updated .
Affected ranges: introduced 7.0.0, fixed 7.0.9; introduced 0, fixed 6.0.20.
Fix versions reported by the advisory: 7.0.9, 6.0.20.
Severity: HIGH.
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 7.0.0, fixed 7.0.19; introduced 8.0.0, fixed 8.0.5.
Fix versions reported by the advisory: 7.0.19, 8.0.5.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.6; introduced 9.0.0, fixed 9.0.15; introduced 8.0.0, fixed 8.0.26.
Fix versions reported by the advisory: 10.0.6, 9.0.15, 8.0.26.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.32; introduced 11.0.0-preview.1, fixed 11.0.0-rc.2; introduced 10.0.0, fixed 10.0.13; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 8.0.32, 11.0.0-rc.2, 10.0.13, 9.0.21.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.21; introduced 10.0.0, fixed 10.0.13; introduced 8.0.0, fixed 8.0.32.
Fix versions reported by the advisory: 9.0.21, 10.0.13, 8.0.32.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.3; introduced 8.0.0, fixed 8.0.14; introduced 6.0.0, last_affected 6.0.36.
Fix versions reported by the advisory: 9.0.3, 8.0.14.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.32; introduced 10.0.0, fixed 10.0.13; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 8.0.32, 10.0.13, 9.0.21.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability
Published .
Updated .
Affected ranges: introduced 11.0.0-preview.1, fixed 11.0.0-rc.2; introduced 8.0.0, fixed 8.0.32; introduced 10.0.0, fixed 10.0.13; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 11.0.0-rc.2, 8.0.32, 10.0.13, 9.0.21.
Severity: CRITICAL.
Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.32; introduced 10.0.0, fixed 10.0.13; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 8.0.32, 10.0.13, 9.0.21.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.32; introduced 10.0.0, fixed 10.0.13; introduced 11.0.0-preview.1, fixed 11.0.0-rc.2; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 8.0.32, 10.0.13, 11.0.0-rc.2, 9.0.21.
Severity: CRITICAL.
Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.21; introduced 10.0.0, fixed 10.0.13; introduced 8.0.0, fixed 8.0.32.
Fix versions reported by the advisory: 9.0.21, 10.0.13, 8.0.32.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.32; introduced 10.0.0, fixed 10.0.13; introduced 9.0.0, fixed 9.0.21; introduced 11.0.0-preview.1, fixed 11.0.0-rc.2.
Fix versions reported by the advisory: 8.0.32, 10.0.13, 9.0.21, 11.0.0-rc.2.
Severity: HIGH.
Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.