dotnet7

3 results · Clear filters · Feed

• High 7.8
  CVE-2026-114148 Public exploit

  ASP.NET Core Elevation of Privilege Vulnerability

  Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

  Microsoft .NET 11.0 installed on Windows .NET 11.0 installed on Linux .NET 11.0 installed on Mac OS Linux Windows macOS Ubuntu Alpine
  Oct 29, 2026
• High 8.8
  CVE-2026-96230 Public exploit

  ASP.NET Core Remote Code Execution Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2026 version 18.10 Microsoft.AspNetCore.Components.WebAssembly.Server Ubuntu Alpine NuGet
  Oct 13, 2026
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs go dotnet7 trafficserver Debian Ubuntu Alpine Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023