TI-2026-73022 CVE-2026-96233 · GHSA-87vj-4hqv-22p9
Out-of-bounds write in ASP.NET Core enables denial of service
Priority MEDIUM 41
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
RHSA-2026:84424
Red Hat Hardened Images RPMs Security Update
Released 2026-10-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images aspnetcore-runtime-9.0-9.0.21-0.1.hum1@aarch64, aspnetcore-runtime-9.0-9.0.21-0.1.hum1@x86_64, aspnetcore-runtime-dbg-9.0-9.0.21-0.1.hum1@aarch64 +26
Fixes 9 records
TI-2026-72239 CVE-2026-70159 · GHSA-334f-vvp4-7g6p
Unlimited resource allocation in ASP.NET Core allows denial of service
Priority MEDIUM 41
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
TI-2026-72044 CVE-2026-69651 · GHSA-3rxq-g8rj-r2cf
Inefficient algorithmic complexity in .NET allows denial of service
Priority MEDIUM 41
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
TI-2026-72018 CVE-2026-58280 · GHSA-mc4q-93x5-f6hj
Uncontrolled recursion in .NET lets attackers deny service
Priority MEDIUM 41
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
Priority LOW 36
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
TI-2026-73020 CVE-2026-96231 · GHSA-2j93-m82w-73j2
Link following in .NET lets local attackers gain privileges
Priority LOW 36
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
TI-2026-73017 CVE-2026-96225 · GHSA-w6wh-p4g7-mpj2
Link following in .NET lets local users escalate privileges
Priority LOW 36
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Priority LOW 29
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
TI-2026-72023 CVE-2026-66822 · GHSA-wxxw-5cvc-53j7
Sensitive data leak in .NET runtime lets remote attackers read data
Priority LOW 28
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.