VDB

CVE-2026-70196

CVE-2026-70196 PUBLISHED CVSS 5.9 MEDIUM

Reported by microsoft · Published October 13, 2026

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Risk Scores

CVSS 3.1
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftASP.NET Core 10.010.0
MicrosoftASP.NET Core 8.08.0
MicrosoftASP.NET Core 9.09.0
MicrosoftMicrosoft Visual Studio 2022 version 17.1417.14.0
MicrosoftMicrosoft Visual Studio 2026 version 18.1018.10.0
NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm648.0.0, 10.0.0, 9.0.0
NuGetMicrosoft.AspNetCore.App.Runtime.win-x8610.0.0, 9.0.0, 8.0.0
NuGetMicrosoft.AspNetCore.App.Runtime.osx-x6410.0.0, 8.0.0, 9.0.0
NuGetMicrosoft.AspNetCore.App.Runtime.linux-x648.0.0, 9.0.0, 10.0.0
alpinedotnet9-runtime0
NuGetMicrosoft.AspNetCore.App.Runtime.osx-arm649.0.0, 8.0.0, 10.0.0
MicrosoftMicrosoft Visual Studio 2022 version 17.1417.14.0
microsoftasp.net_core9.0, 10.0, 8.0
NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm10.0.0, 9.0.0, 8.0.0
NuGetMicrosoft.AspNetCore.App.Runtime.win-x648.0.0, 10.0.0, 9.0.0
NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm648.0.0, 10.0.0, 9.0.0
MicrosoftASP.NET Core 10.010.0
MicrosoftASP.NET Core 8.08.0
alpinedotnet8-runtime0
MicrosoftMicrosoft Visual Studio 2026 version 18.1018.10.0

…and 7 more

Timeline

  • Oct 13, 2026 CVE Published
  • Oct 14, 2026 EPSS Score
  • Oct 14, 2026 Coalition ESS Score
  • Oct 15, 2026 Security Advisory
  • Oct 15, 2026 CVE Updated
  • Oct 16, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›