Microsoft.AspNetCore.App.Runtime.linux-arm vulnerabilities

2 known vulnerabilities in Microsoft.AspNetCore.App.Runtime.linux-arm from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  .NET 6.0: Use After Free

  CVE-2025-36854Sep 8, 2025Microsoft

  A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution. Per CW

• 7.0 High severity

  ASP.NET Core 6.0: Weak Authentication

  CVE-2025-7326Jul 8, 2025Microsoft

  Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support pr