Microsoft Security Advisory CVE-2026-114150 - ASP.NET Core Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory provides guidance on updating affected applications and components. A reused ResponseBufferingStream can retain pooled tail memory and expose response-body...

GHSA-6VJV-7WM8-P67R Microsoft Security Advisory CVE-2026-114150 - ASP.NET Core Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory provides guidance on updating affected applications and components. A reused ResponseBufferingStream can retain pooled tail memory and expose response-body...

PT-2026-143633

Name of the Vulnerable Software and Affected Versions ASP.NET Core versions 11.0.0-preview.2.26159.112 through 11.0.0-rc.3.26522.148 Description Use of an uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network. Specifically, a reused...