ASP.NET Core 8.0 vulnerabilities

4 known vulnerabilities in ASP.NET Core 8.0 from Microsoft. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  ASP.NET Core 10.0: Inconsistent Interpretation of HTTP Requests

  CVE-2026-88092Oct 13, 2026MicrosoftEPSS 1.04%

  Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

• 9.1 Critical severity

  ASP.NET Core 10.0: Inconsistent Interpretation of HTTP Requests

  CVE-2026-70188Oct 13, 2026MicrosoftEPSS 1.03%

  Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

• 7.5 High severity

  ASP.NET Core 10.0: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-70183Oct 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

• 9.9 Critical severity

  ASP.NET Core 2.3: Inconsistent Interpretation of HTTP Requests

  CVE-2025-55315Oct 14, 2025MicrosoftEPSS 67.2%

  Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.