Known vulnerabilities and malicious package reports for Microsoft.NetCore.App.Runtime.linux-musl-arm on NuGet, live from OSV, with CISA KEV exploitation status and EPSS scores.
0 malicious package reports and 16 vulnerabilities returned by OSV. Check a specific version to see which reports apply.
Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.7; introduced 6.0.0, fixed 6.0.32.
Fix versions reported by the advisory: 8.0.7, 6.0.32.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Published .
Updated .
Reported affected releases: 9.0.0, 8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8.
Affected ranges: introduced 9.0.0, fixed 9.0.1; introduced 8.0.0, fixed 8.0.12.
Fix versions reported by the advisory: 9.0.1, 8.0.12.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.6; introduced 9.0.0, fixed 9.0.15; introduced 8.0.0, fixed 8.0.26.
Fix versions reported by the advisory: 10.0.6, 9.0.15, 8.0.26.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Published .
Updated .
Reported affected releases: 9.0.0, 8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8.
Affected ranges: introduced 9.0.0, fixed 9.0.1; introduced 8.0.0, fixed 8.0.12.
Fix versions reported by the advisory: 9.0.1, 8.0.12.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
Published .
Updated .
Reported affected releases: 9.0.0.
Affected ranges: introduced 9.0.0, fixed 9.0.1.
Fix versions reported by the advisory: 9.0.1.
Severity: HIGH.
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
Published .
Updated .
Reported affected releases: 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7.
Affected ranges: introduced 8.0.0, fixed 8.0.8.
Fix versions reported by the advisory: 8.0.8.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Reported affected releases: 9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 10.0.0, 10.0.1, 10.0.2, 10.0.3.
Affected ranges: introduced 9.0.0, fixed 9.0.14; introduced 10.0.0, fixed 10.0.4.
Fix versions reported by the advisory: 9.0.14, 10.0.4.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.6; introduced 8.0.0, fixed 8.0.17.
Fix versions reported by the advisory: 9.0.6, 8.0.17.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.10; introduced 8.0.0, fixed 8.0.21.
Fix versions reported by the advisory: 9.0.10, 8.0.21.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
.NET Elevation of Privilege Vulnerability
Published .
Updated .
Reported affected releases: 10.0.0, 10.0.1, 10.0.2, 10.0.3.
Affected ranges: introduced 10.0.0, fixed 10.0.4.
Fix versions reported by the advisory: 10.0.4.
Severity: HIGH.
Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.