10035 matches found
GHSA-MF4X-W4GH-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unauthenticated...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process...
Deadlock
Overview Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process. An attacker can cause the server to become unresponsive and exhaust system resources by sending crafted HTTP/3 reset or abort sequences that trigger excessive blocked-thread creation...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process. A...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process. A...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process. A...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process. A...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling proces...
CVE-2026-70186
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-103558
Deadlock in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...
CVE-2026-103558
A deadlock vulnerability (CWE-833) exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to cause a denial of service (DoS) over the network. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity impact on availability....
CVE-2026-70186
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70186
A deadlock vulnerability in ASP.NET Core allows an unauthorized attacker to perform a Denial-of-Service (DoS) attack over a network. The vulnerability is identified with a CVSS score of 7.5 and is classified under CWE-833 . While the technical root cause is not detailed in the provided documents,...
