Known vulnerabilities and malicious package reports for Microsoft.NetCore.App.Runtime.win-arm on NuGet, live from OSV, with CISA KEV exploitation status and EPSS scores.
0 malicious package reports and 20 vulnerabilities returned by OSV. Check a specific version to see which reports apply.
Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.7; introduced 6.0.0, fixed 6.0.32.
Fix versions reported by the advisory: 8.0.7, 6.0.32.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Reported affected releases: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.7, 7.0.8, 7.0.9.
Affected ranges: introduced 7.0.0, fixed 7.0.10.
Fix versions reported by the advisory: 7.0.10.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.1; introduced 8.0.0, fixed 8.0.12.
Fix versions reported by the advisory: 9.0.1, 8.0.12.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.6; introduced 9.0.0, fixed 9.0.15; introduced 8.0.0, fixed 8.0.26.
Fix versions reported by the advisory: 10.0.6, 9.0.15, 8.0.26.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.1; introduced 8.0.0, fixed 8.0.12.
Fix versions reported by the advisory: 9.0.1, 8.0.12.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.1.
Fix versions reported by the advisory: 9.0.1.
Severity: HIGH.
.NET Remote Code Execution vulnerability
Published .
Updated .
Affected ranges: introduced 7.0.0, fixed 7.0.5; introduced 6.0.0, fixed 6.0.16.
Fix versions reported by the advisory: 7.0.5, 6.0.16.
Severity: HIGH.
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.8.
Fix versions reported by the advisory: 8.0.8.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
.NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.14; introduced 10.0.0, fixed 10.0.4.
Fix versions reported by the advisory: 9.0.14, 10.0.4.
Severity: HIGH.
.NET Remote Code Execution Vulnerability
Published .
Updated .
Affected ranges: introduced 7.0.0, fixed 7.0.7; introduced 6.0.0, fixed 6.0.18.
Fix versions reported by the advisory: 7.0.7, 6.0.18.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
.NET Remote Code Execution Vulnerability
Published .
Updated .
Reported affected releases: 7.0.0, 7.0.1, 7.0.2, 6.0.0, 6.0.1, 6.0.10, 6.0.11, 6.0.12, 6.0.13, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9.
Affected ranges: introduced 7.0.0, fixed 7.0.3; introduced 6.0.0, fixed 6.0.14.
Fix versions reported by the advisory: 7.0.3, 6.0.14.
Severity: HIGH.
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.6; introduced 8.0.0, fixed 8.0.17.
Fix versions reported by the advisory: 9.0.6, 8.0.17.
Severity: HIGH.
Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability
Published .
Updated .
Affected ranges: introduced 7.0.0, fixed 7.0.7; introduced 6.0.0, fixed 6.0.18.
Fix versions reported by the advisory: 7.0.7, 6.0.18.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Published .
Updated .
Affected ranges: introduced 9.0.0, fixed 9.0.10; introduced 8.0.0, fixed 8.0.21.
Fix versions reported by the advisory: 9.0.10, 8.0.21.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability
Published .
Updated .
Affected ranges: introduced 8.0.0, fixed 8.0.27; introduced 9.0.0, fixed 9.0.16; introduced 10.0.0, fixed 10.0.8.
Fix versions reported by the advisory: 8.0.27, 9.0.16, 10.0.8.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.10; introduced 9.0.0, fixed 9.0.18; introduced 8.0.0, fixed 8.0.29.
Fix versions reported by the advisory: 10.0.10, 9.0.18, 8.0.29.
Severity: HIGH.
Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.