Microsoft.AspNetCore.App.Runtime.win-arm (NuGet)
Advisories
67
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.
Upgrade commands
dotnet
dotnet add package Microsoft.AspNetCore.App.Runtime.win-arm --version 11.0.0-rc.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability |
Medium EPSS 0.91% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability |
Medium EPSS 0.91% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability |
Medium EPSS 0.91% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.23% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.23% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.23% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability |
High EPSS 0.73% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability |
High EPSS 0.73% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability |
High EPSS 0.73% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.26 | 8.0.26 |
| GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.15 | 9.0.15 |
| GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.6 | 10.0.6 |
| GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability |
High EPSS 2.43% |
>= 8.0.0, < 8.0.27 | 8.0.27 |
| GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability |
High EPSS 2.43% |
>= 10.0.0, < 10.0.8 | 10.0.8 |
| GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability |
High EPSS 2.43% |
>= 9.0.0, < 9.0.16 | 9.0.16 |
| GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability |
High EPSS 2.99% |
>= 10.0.0, < 10.0.4 | 10.0.4 |
| GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability |
High EPSS 2.99% |
>= 9.0.0, < 9.0.14 | 9.0.14 |
| GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability |
High EPSS 2.99% |
>= 8.0.0, < 8.0.25 | 8.0.25 |
| GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability |
Critical EPSS 66.53% |
>= 10.0.0-rc.1.25451.107, < 10.0.0-rc.2.25502.107 | 10.0.0-rc.2.25502.107 |
| GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability |
Critical EPSS 66.53% |
>= 9.0.0, < 9.0.10 | 9.0.10 |
| GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability |
Critical EPSS 66.53% |
>= 8.0.0, < 8.0.21 | 8.0.21 |
| GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability |
High EPSS 1.01% |
>= 6.0.0, <= 6.0.36 | No fix yet |
| GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability |
High EPSS 1.01% |
>= 9.0.0, < 9.0.3 | 9.0.3 |
| GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability |
High EPSS 1.01% |
>= 8.0.0, < 8.0.14 | 8.0.14 |
| GHSA-7vw9-cfwx-9gx9 Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability |
High EPSS 2.08% |
>= 8.0.0, < 8.0.10 | 8.0.10 |
| GHSA-7vw9-cfwx-9gx9 Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability |
High EPSS 2.08% |
>= 9.0.0-preview.1.24081.5, < 9.0.0-rc.2.24474.3 | 9.0.0-rc.2.24474.3 |
| GHSA-7qrv-8f9x-3h32 Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability |
High EPSS 2.70% |
>= 8.0.0, < 8.0.8 | 8.0.8 |
| GHSA-chfc-9w6m-75rf Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability |
High EPSS 2.56% |
>= 8.0.0, < 8.0.7 | 8.0.7 |
| GHSA-hhc7-x9w4-cw47 Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability |
Medium EPSS 1.69% |
>= 7.0.0, < 7.0.19 | 7.0.19 |
| GHSA-hhc7-x9w4-cw47 Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability |
Medium EPSS 1.69% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability |
High EPSS 2.42% |
>= 7.0.0, < 7.0.16 | 7.0.16 |
| GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability |
High EPSS 2.42% |
>= 8.0.0, < 8.0.2 | 8.0.2 |
| GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability |
High EPSS 2.42% |
< 6.0.27 | 6.0.27 |
| GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability |
Medium EPSS 2.50% |
>= 3.1.0, < 3.1.28 | 3.1.28 |
| GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability |
Medium EPSS 2.50% |
>= 6.0.0, < 6.0.8 | 6.0.8 |
| GHSA-p57v-gv7q-4xfm .NET Denial of Service Vulnerability |
High EPSS 2.59% |
>= 7.0.0, < 7.0.10 | 7.0.10 |
| GHSA-25c8-p796-jg6r Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability |
High EPSS 1.99% |
>= 7.0.0, < 7.0.9 | 7.0.9 |
| GHSA-25c8-p796-jg6r Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability |
High EPSS 1.99% |
< 6.0.20 | 6.0.20 |
| GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability |
High EPSS 5.70% |
>= 6.0.0, < 6.0.5 | 6.0.5 |
| GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability |
High EPSS 5.70% |
>= 5.0.0, < 5.0.17 | 5.0.17 |
| GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability |
High EPSS 5.70% |
>= 3.0.0, < 3.1.25 | 3.1.25 |
| GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability |
High EPSS 3.55% |
>= 5.0.0, < 5.0.15 | 5.0.15 |
| GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability |
High EPSS 3.55% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability |
High EPSS 3.55% |
>= 3.0.0, < 3.1.23 | 3.1.23 |
| GHSA-x459-p2rx-f8ff .NET Denial of Service Vulnerability |
High EPSS 3.74% |
>= 5.0.0, < 5.0.14 | 5.0.14 |
| GHSA-x459-p2rx-f8ff .NET Denial of Service Vulnerability |
High EPSS 3.74% |
>= 6.0.0, < 6.0.2 | 6.0.2 |
| GHSA-r8m2-4x37-6592 .NET Denial of Service Vulnerability |
High EPSS 4.04% |
>= 3.1.0, < 3.1.29 | 3.1.29 |
| GHSA-r8m2-4x37-6592 .NET Denial of Service Vulnerability |
High EPSS 4.04% |
>= 5.0.0, < 6.0.9 | 6.0.9 |
| GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability |
High EPSS 5.54% |
>= 6.0.0, < 6.0.5 | 6.0.5 |
| GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability |
High EPSS 5.54% |
>= 5.0.0, < 5.0.17 | 5.0.17 |
| GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability |
High EPSS 5.54% |
>= 3.0.0, < 3.1.25 | 3.1.25 |
| GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability |
High EPSS 5.73% |
>= 3.0.0, < 3.1.25 | 3.1.25 |
| GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability |
High EPSS 5.73% |
>= 5.0.0, < 5.0.17 | 5.0.17 |
| GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability |
High EPSS 5.73% |
>= 6.0.0, < 6.0.5 | 6.0.5 |
| GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn |
Medium | >= 3.1.0, < 3.1.28 | 3.1.28 |
| GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn |
Medium | >= 6.0.0, < 6.0.8 | 6.0.8 |
| GHSA-242j-2gm6-5rwx ASP.NET Core and Visual Studio Denial of Service Vulnerability |
High EPSS 5.30% |
>= 3.1.0, < 3.1.11 | 3.1.11 |
| GHSA-242j-2gm6-5rwx ASP.NET Core and Visual Studio Denial of Service Vulnerability |
High EPSS 5.30% |
>= 5.0.0, < 5.0.2 | 5.0.2 |
| GHSA-hxrm-9w7p-39cc Cookie parsing failure |
High EPSS 5.93% |
>= 3.1.0, < 3.1.8 | 3.1.8 |
| GHSA-f8qx-mjcq-wfgx ASP.NET Core Denial of Service Vulnerability |
High EPSS 6.56% |
>= 3.1.0, < 3.1.7 | 3.1.7 |
| GHSA-3cf7-7wq6-8842 ASP.NET Core Denial of Service Vulnerability |
High EPSS 5.31% |
>= 3.1.0, < 3.1.4 | 3.1.4 |
| GHSA-655q-9gvg-q4cm Remote code execution in ASP.NET Core |
High EPSS 21.17% |
>= 3.1.0, < 3.1.1 | 3.1.1 |
| GHSA-23cv-jh4v-vffm Denial of service in ASP.NET Core |
Medium EPSS 7.61% |
>= 3.1.0, < 3.1.1 | 3.1.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor