microsoft asp.net core

Name: microsoft asp.net core
Brand: microsoft

productUS

cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical21high9medium1low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	6.0.23	2023-10-10	2 versions
CVE-2023-38180US	—OT critical	14.1% (97th)	KEV	2.1.40	2023-08-08	2.1 → 2.1.40
CVE-2025-55315US	—	66.5% (99th)	Exploit	8.0.21	2025-10-14	3 versions
CVE-2020-0603US	high8.8	21.0% (98th)	—	no fix	2020-01-14	3 versions
CVE-2018-8292US	high7.5	14.8% (97th)	—	no fix	2018-10-10	3 versions
CVE-2026-40372US	—	11.2% (96th)	—	10.0.7	2026-04-21	10.0.0 → 10.0.7
CVE-2018-8171US	high7.5	10.8% (96th)	—	no fix	2018-07-11	3 versions
CVE-2017-8700US	high7.5	10.4% (96th)	—	no fix	2017-11-15	3 versions
CVE-2018-0787US	high8.8	9.57% (95th)	—	no fix	2018-03-14	3 versions
CVE-2017-11879US	high8.8	9.40% (95th)	—	no fix	2017-11-15	= 2.0
CVE-2018-0875US	high7.5	9.08% (95th)	—	no fix	2018-03-14	3 versions
CVE-2019-0564US	high7.5	8.39% (95th)	—	no fix	2019-01-08	= 2.1
CVE-2019-0548US	high7.5	8.21% (95th)	—	no fix	2019-01-08	2 versions
CVE-2018-0808US	high7.5	7.76% (95th)	—	no fix	2018-03-14	3 versions
CVE-2020-0602US	high7.5	7.61% (95th)	—	no fix	2020-01-14	3 versions
CVE-2018-8416US	medium6.5	7.26% (94th)	—	no fix	2018-11-14	= 2.1
CVE-2019-0815US	high7.5	6.97% (94th)	—	no fix	2019-04-09	= 2.2
CVE-2019-0982US	high7.5	6.68% (94th)	—	no fix	2019-05-16	2 versions
CVE-2020-1597US	high7.5	6.56% (94th)	—	no fix	2020-08-17	2 versions
CVE-2018-8409US	high7.5	6.56% (94th)	—	2.1.4	2018-09-13	2.1 → 2.1.4
CVE-2018-0784US	high8.8	6.50% (94th)	—	no fix	2018-01-10	= 2.0
CVE-2020-1045US	medium5.0	5.93% (93rd)	—	3.1.8	2020-09-11	2 versions
CVE-2020-1161US	high7.5	5.31% (93rd)	—	no fix	2020-05-21	= 3.1
CVE-2021-1723US	medium5.0	5.30% (93rd)	—	no fix	2021-01-12	2 versions
CVE-2019-1302US	high8.8	4.85% (92nd)	—	no fix	2019-09-11	3 versions
CVE-2018-0785US	medium6.5	3.03% (87th)	—	no fix	2018-01-10	= 2.0
CVE-2026-26130US	—	2.99% (87th)	—	9.0.14	2026-03-10	3 versions
CVE-2023-36038US	high7.5	2.78% (86th)	—	no fix	2023-11-14	= 8.0.0
CVE-2024-21404US	—	2.71% (86th)	—	7.0.16	2024-02-13	3 versions
CVE-2019-1075US	medium6.1	2.64% (86th)	—	no fix	2019-07-15	2 versions
CVE-2026-45591US	—	2.48% (84th)	—	9.0.17	2026-06-09	3 versions
CVE-2024-21386US	—	2.42% (84th)	—	8.0.2	2024-02-13	3 versions
CVE-2023-35391US	high7.5	1.90% (80th)	—	2.1.40	2023-08-08	2.1 → 2.1.40
CVE-2025-26682US	—	1.71% (77th)	—	9.0.4	2025-04-08	2 versions
CVE-2021-34532US	low2.1	1.22% (68th)	—	no fix	2021-08-12	3 versions
CVE-2023-36558US	medium5.5	1.08% (65th)	—	6.0.25	2023-11-14	3 versions
CVE-2025-24070US	—	1.01% (63rd)	—	8.0.14	2025-03-11	2 versions
CVE-2026-88092US	critical9.4	0.93% (61st)	—	8.0.32	2026-10-13	5 versions
CVE-2026-69304US	medium5.9	0.85% (58th)	—	10.0.9	2026-09-08	6 versions
CVE-2018-8356US	medium5.5	0.75% (55th)	—	no fix	2018-07-11	3 versions
CVE-2021-43877US	medium4.6	0.73% (54th)	—	no fix	2021-12-15	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation11 CVEs
CWE-400Uncontrolled Resource Consumption10 CVEs
CWE-19CWE-194 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2 CVEs
CWE-476NULL Pointer Dereference2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan