CVE-2026-47300

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

A cross-site scripting (XSS) vulnerability in ASP.NET Core allows an unauthorized attacker to execute code over a network.

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL.

An elevation of privilege vulnerability exists when ASP.NET Core fails to properly sanitize web requests.

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

A vulnerability in ASP.NET Core due to improper verification of cryptographic signature allows an unauthorized attacker to elevate privileges over a network.

ASP.NET Core has a Denial of Service (DoS) vulnerability that could lead to service overload and unavailability.

Denial of service vulnerability in ASP.NET Core when improperly handling web requests. A remote unauthenticated attacker could send specially crafted requests, causing the application to become unavailable.