Microsoft.NetCore.App.Runtime.win-arm64 (NuGet)
Advisories
103
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.
Upgrade commands
dotnet
dotnet add package Microsoft.NetCore.App.Runtime.win-arm64 --version 11.0.0-rc.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-4mpw-cpwj-hxxj Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.79% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-4mpw-cpwj-hxxj Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.79% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-4mpw-cpwj-hxxj Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.79% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-4mpw-cpwj-hxxj Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 0.79% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-c494-m2fq-59mx Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability |
High EPSS 1.03% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-c494-m2fq-59mx Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability |
High EPSS 1.03% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-c494-m2fq-59mx Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability |
High EPSS 1.03% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability |
Medium EPSS 0.74% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability |
Medium EPSS 0.74% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability |
Medium EPSS 0.74% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability |
High EPSS 0.61% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability |
High EPSS 0.61% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability |
High EPSS 0.61% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-rg75-q538-x34v Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability |
Medium EPSS 0.71% |
>= 8.0.0, < 8.0.27 | 8.0.27 |
| GHSA-rg75-q538-x34v Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability |
Medium EPSS 0.71% |
>= 10.0.0, < 10.0.8 | 10.0.8 |
| GHSA-rg75-q538-x34v Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability |
Medium EPSS 0.71% |
>= 9.0.0, < 9.0.16 | 9.0.16 |
| GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability |
High EPSS 2.28% |
>= 8.0.0, < 8.0.26 | 8.0.26 |
| GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability |
High EPSS 2.28% |
>= 9.0.0, < 9.0.15 | 9.0.15 |
| GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability |
High EPSS 2.28% |
>= 10.0.0, < 10.0.6 | 10.0.6 |
| GHSA-73j8-2gch-69rq .NET Denial of Service Vulnerability |
High EPSS 2.13% |
>= 9.0.0, < 9.0.14 | 9.0.14 |
| GHSA-73j8-2gch-69rq .NET Denial of Service Vulnerability |
High EPSS 2.13% |
>= 10.0.0, < 10.0.4 | 10.0.4 |
| GHSA-gwq6-fmvp-qp68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability |
Medium EPSS 0.72% |
>= 8.0.0, < 8.0.21 | 8.0.21 |
| GHSA-gwq6-fmvp-qp68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability |
Medium EPSS 0.72% |
>= 9.0.0, < 9.0.10 | 9.0.10 |
| GHSA-266m-wp2v-x7mq Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability |
High EPSS 1.07% |
>= 8.0.0, < 8.0.17 | 8.0.17 |
| GHSA-266m-wp2v-x7mq Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability |
High EPSS 1.07% |
>= 9.0.0, < 9.0.6 | 9.0.6 |
| GHSA-gjf6-3w4p-7xfh Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 2.38% |
>= 9.0.0, < 9.0.1 | 9.0.1 |
| GHSA-gjf6-3w4p-7xfh Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 2.38% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-jjcv-wr2g-4rv4 Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.84% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-jjcv-wr2g-4rv4 Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.84% |
>= 9.0.0, < 9.0.1 | 9.0.1 |
| GHSA-p54p-p3qm-8vgj Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability |
High EPSS 1.72% |
>= 9.0.0, < 9.0.1 | 9.0.1 |
| GHSA-3r34-r6w3-fqp6 Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability |
Medium EPSS 1.39% |
>= 8.0.0, < 8.0.8 | 8.0.8 |
| GHSA-447r-wph3-92pm Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability |
High EPSS 2.74% |
>= 6.0.0, < 6.0.32 | 6.0.32 |
| GHSA-447r-wph3-92pm Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability |
High EPSS 2.74% |
>= 8.0.0, < 8.0.7 | 8.0.7 |
| GHSA-7fcr-8qw6-92fr Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability |
Medium EPSS 1.25% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-7fcr-8qw6-92fr Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability |
Medium EPSS 1.25% |
>= 7.0.0, < 7.0.19 | 7.0.19 |
| GHSA-5fxj-whcv-crrc Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability |
High EPSS 3.09% |
>= 8.0.0, < 8.0.3 | 8.0.3 |
| GHSA-5fxj-whcv-crrc Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability |
High EPSS 3.09% |
>= 7.0.0-preview.1.22076.8, < 7.0.17 | 7.0.17 |
| GHSA-h7jm-g87p-5935 Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 6.0.0, < 6.0.22 | 6.0.22 |
| GHSA-h7jm-g87p-5935 Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 7.0.0, < 7.0.11 | 7.0.11 |
| GHSA-38fq-h5hc-gwv8 Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 6.0.0, < 6.0.22 | 6.0.22 |
| GHSA-38fq-h5hc-gwv8 Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 7.0.0, < 7.0.11 | 7.0.11 |
| GHSA-g4p8-g7mq-wpx4 Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 6.0.0, < 6.0.22 | 6.0.22 |
| GHSA-g4p8-g7mq-wpx4 Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 7.0.0, < 7.0.11 | 7.0.11 |
| GHSA-3qf9-qxfj-4whc Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 7.0.0, < 7.0.11 | 7.0.11 |
| GHSA-3qf9-qxfj-4whc Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability |
High EPSS 1.23% |
>= 6.0.0, < 6.0.22 | 6.0.22 |
| GHSA-p57v-gv7q-4xfm .NET Denial of Service Vulnerability |
High EPSS 2.59% |
>= 7.0.0, < 7.0.10 | 7.0.10 |
| GHSA-555c-2p6r-68mm .NET Denial of Service vulnerability |
High EPSS 2.63% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-555c-2p6r-68mm .NET Denial of Service vulnerability |
High EPSS 2.63% |
>= 6.0.0, < 6.0.18 | 6.0.18 |
| GHSA-jx7q-xxmw-44vf .NET Elevation of Privilege Vulnerability |
High EPSS 1.56% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-jx7q-xxmw-44vf .NET Elevation of Privilege Vulnerability |
High EPSS 1.56% |
>= 6.0.0, < 6.0.18 | 6.0.18 |
| GHSA-88q2-h5g3-p4pg .NET Remote Code Execution Vulnerability |
High EPSS 1.18% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-88q2-h5g3-p4pg .NET Remote Code Execution Vulnerability |
High EPSS 1.18% |
>= 6.0.0, < 6.0.18 | 6.0.18 |
| GHSA-x469-cv7m-77r9 .NET Remote Code Execution Vulnerability |
High EPSS 1.00% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-gh24-9qjj-mr67 Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability |
High EPSS 1.00% |
>= 6.0.0, < 6.0.18 | 6.0.18 |
| GHSA-gh24-9qjj-mr67 Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability |
High EPSS 1.00% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-w4m3-43gp-x8hx .NET Remote Code Execution vulnerability |
High EPSS 1.54% |
>= 6.0.0, < 6.0.16 | 6.0.16 |
| GHSA-w4m3-43gp-x8hx .NET Remote Code Execution vulnerability |
High EPSS 1.54% |
>= 7.0.0, < 7.0.5 | 7.0.5 |
| GHSA-824j-wqm8-89mj .NET Remote Code Execution Vulnerability |
High EPSS 1.15% |
>= 6.0.0, < 6.0.14 | 6.0.14 |
| GHSA-824j-wqm8-89mj .NET Remote Code Execution Vulnerability |
High EPSS 1.15% |
>= 7.0.0, < 7.0.3 | 7.0.3 |
| GHSA-8f7f-vqg5-jrv9 .NET Denial of Service Vulnerability |
High EPSS 2.84% |
>= 6.0.0, < 6.0.13 | 6.0.13 |
| GHSA-rh58-r7jh-xhx3 .NET Core Elevation of Privilege Vulnerability |
High EPSS 3.90% |
>= 3.1.0, < 3.1.18 | 3.1.18 |
| GHSA-rh58-r7jh-xhx3 .NET Core Elevation of Privilege Vulnerability |
High EPSS 3.90% |
>= 5.0.0, < 5.0.9 | 5.0.9 |
| GHSA-vgwq-hfqc-58wv .NET Core Information Disclosure Vulnerability |
Medium EPSS 2.07% |
>= 3.1.0, < 3.1.18 | 3.1.18 |
| GHSA-vgwq-hfqc-58wv .NET Core Information Disclosure Vulnerability |
Medium EPSS 2.07% |
>= 5.0.0, < 5.0.9 | 5.0.9 |
| GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability |
Medium EPSS 1.61% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability |
Medium EPSS 1.61% |
>= 5.0.0, < 5.0.15 | 5.0.15 |
| GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability |
Medium EPSS 1.61% |
>= 3.0.0, < 3.1.23 | 3.1.23 |
| GHSA-3gp9-h8hw-pxpw Denial of service in .NET core |
Medium EPSS 3.34% |
>= 3.1.0, < 3.1.12 | 3.1.12 |
| GHSA-3gp9-h8hw-pxpw Denial of service in .NET core |
Medium EPSS 3.34% |
>= 5.0.0, < 5.0.3 | 5.0.3 |
| GHSA-3w5p-jhp5-c29q .NET Core & .NET Framework Denial of Service Vulnerability |
High EPSS 6.46% |
>= 3.1.0, < 3.1.4 | 3.1.4 |
| GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library |
Critical EPSS 3.22% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library |
Critical EPSS 3.22% |
>= 5.0.0, < 5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library |
Critical EPSS 3.22% |
>= 3.0.0, < 3.1.23 | 3.1.23 |
| CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited |
High EPSS 95.80% |
>= 3.1.0, < 3.1.6 | 3.1.6 |
| CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited |
High EPSS 95.80% |
>= 3.1.0, < 3.1.6 | 3.1.6 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor