MediumCVSS 5.3
EPSS 1.2%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Product
nuget Microsoft.NETCore.App.Runtime.linux-x64 vulnerabilities
45 published CVES affecting nuget Microsoft.NETCore.App.Runtime.linux-x64, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 45
- Critical
- 0
- High
- 30
- Medium
- 15
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Latest nuget Microsoft.NETCore.App.Runtime.linux-x64 CVEs
Newest publication first · page 1 of 2
-
-
MediumCVSS 6.8 EPSS 0.66%
Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 7.5 EPSS 1.3%
Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 8.1
Executive summary A buffer overflow vulnerability exists in the Brotli decompression library used by .NET. This vulnerability may allow an unauthenticated attacker to read or corrupt process memory. This could lead to information disclosure, denial of service, or elevation of pri...
-
HighCVSS 7.5 EPSS 1.3%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 0.99%
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.8 EPSS 0.41%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.41%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
MediumCVSS 6.5 EPSS 0.49%
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 7.5 EPSS 1.3%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
MediumCVSS 5.9 EPSS 0.78%
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.8 EPSS 0.34%
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.5 EPSS 1.2%
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
-
MediumCVSS 5.9 EPSS 0.75%
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
MediumCVSS 6.5 EPSS 0.74%
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
-
HighCVSS 7.5 EPSS 1.2%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 8.2 EPSS 0.61%
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 7.5 EPSS 1.2%
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 1.2%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 1.2%
Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.
-
MediumCVSS 5.5 EPSS 0.39%
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
-
HighCVSS 7.5 EPSS 2.4%
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
-
HighCVSS 7.5 EPSS 2.3%
Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.8 EPSS 0.40%
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.
-
CVE-2025-55248 .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
PublishedMediumCVSS 5.7 EPSS 0.74%Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.