{"id":"EUVD-2026-73741","enisaUuid":"b67a1758-a4ff-3dbb-96fa-d9b1bcf883a0","description":"Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.","datePublished":"Sep 8, 2026, 5:17:47 PM","dateUpdated":"Oct 14, 2026, 11:13:13 PM","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304\n","aliases":"CVE-2026-69304\nGHSA-v3f6-m9j2-437p\nGHSA-8cp2-47hg-mfgh\n","assigner":"microsoft","epss":0.86,"enisaIdProduct":[{"id":"63afa0c5-d341-3c34-93aa-2e4d0a7a906a","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"705c247f-1510-3a57-80f0-9b27f7a5dfaa","product":{"name":"ASP.NET Core 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0 \u003c8.0.31"},{"id":"7f4dba77-ce07-3282-85e3-d9b72b9dc586","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"8c855a49-133f-3786-afde-af4c9412dbbd","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"a17387cb-0ee7-3ae5-9b6a-236ac6234fa0","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"a7cd0fba-e5b5-3f17-8d53-ea4617511c1b","product":{"name":"ASP.NET Core 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0 \u003c10.0.12"},{"id":"c42a088e-e7f7-3a7a-8810-a41dcdae551d","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"cbe7ee0e-d49f-31f7-b3e1-b430ab0b5ede","product":{"name":"ASP.NET Core 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0 \u003c9.0.20"},{"id":"dec77da9-cd5c-3b84-9e5b-2ff3abca65e6","product":{"name":"ASP.NET Core 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0 \u003c11.0 RC1"}],"enisaIdVendor":[{"id":"7e2924b6-2092-357a-b9e3-77b81d911db0","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"259e9c3c-535e-3f86-8d2b-37f9546cd21c","vulnerability":{"id":"CVE-2026-69304","description":"Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.","datePublished":"Sep 8, 2026, 5:17:47 PM","dateUpdated":"Oct 14, 2026, 11:13:13 PM","status":"PUBLISHED","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304\n","enisa_id":"EUVD-2026-73741\n","assigner":"microsoft","epss":0.86,"dataProcessed":"Oct 30, 2026, 7:16:28 AM","vulnerabilityProduct":[{"id":"13676c07-9bac-3c60-953a-b60a885daa82","product":{"name":"ASP.NET Core 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0 \u003c8.0.31"},{"id":"34781ec9-152f-3745-a514-eac3a17aeef9","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"70faeb88-ea45-3bc4-9acc-a08b0e4762bb","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"8ca6795e-42fa-3adb-977e-3ce855ee8ed0","product":{"name":"ASP.NET Core 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0 \u003c10.0.12"},{"id":"92a8df3f-87df-3eb2-8607-fe4c972870ea","product":{"name":"ASP.NET Core 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0 \u003c9.0.20"},{"id":"9e507a3e-079a-3d58-92dc-4a09592ecc74","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"a5872fcf-2d05-3db1-99b4-6d5513abc17c","product":{"name":"ASP.NET Core 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0 \u003c11.0 RC1"},{"id":"bf1e60a5-b429-3e4a-bcbc-e5da8a0cf6c9","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"c34e4e7b-40cb-3c2b-bb27-dedae8f5c354","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"}],"vulnerabilityVendor":[{"id":"8d26bcff-cb5e-389d-8417-88be6a424862","vendor":{"name":"Microsoft"}}]}},{"id":"66376dbe-00ee-39fb-b4dd-6ead2b0e52f7","vulnerability":{"id":"GHSA-8cp2-47hg-mfgh","description":"Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability","datePublished":"Sep 9, 2026, 4:04:11 PM","dateUpdated":"Sep 9, 2026, 4:04:11 PM","baseScore":0.0,"references":"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-8cp2-47hg-mfgh\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-69304\nhttps://github.com/dotnet/aspnetcore\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304\n","enisa_id":"EUVD-2026-73741\n","aliases":"GHSA-8cp2-47hg-mfgh\nCVE-2026-69304\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:01:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"e6d7574c-b48a-39d4-8391-16387377c000","vulnerability":{"id":"GHSA-v3f6-m9j2-437p","description":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability","datePublished":"Sep 8, 2026, 6:32:21 PM","dateUpdated":"Sep 8, 2026, 9:14:33 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-69304\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304\nhttps://www.nuget.org/packages/Microsoft.AspNetCore.Server.IISIntegration\n","enisa_id":"EUVD-2026-73741\n","aliases":"GHSA-v3f6-m9j2-437p\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:00:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"069c6f45-d662-3156-97e2-b423d62b2de2","advisory":{"id":"RHSA-2026:74947","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 2, 2026, 12:07:39 PM","dateUpdated":"Oct 20, 2026, 4:10:50 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74947\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74947.json\n","aliases":"CVE-2026-69304\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"16a92e37-8e1e-3233-8bc2-519e9dd9c5b0","product":{"name":"dotnet-targeting-pack-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"217a0993-d46f-390b-813d-88cf689f481e","product":{"name":"dotnet-templates-9.0-0:9.0.119-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"232b4759-823d-3fed-86ad-070b036f7a70","product":{"name":"aspnetcore-runtime-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"37f8999a-3ee4-3fcb-924a-d1529b4ce31c","product":{"name":"dotnet-targeting-pack-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"38a2a3f6-f223-3c29-a2c0-244ae2439904","product":{"name":"netstandard-targeting-pack-2.1-0:9.0.119-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"39e5847e-9fc4-3834-bca4-427d0afc8615","product":{"name":"dotnet-templates-9.0-0:9.0.119-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"3e6d3f57-3729-3be1-bd18-ddc8f0a8af9b","product":{"name":"dotnet-apphost-pack-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"498460e4-bec6-3fd9-acf4-17a233395108","product":{"name":"dotnet-sdk-aot-9.0-0:9.0.119-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4b388bc6-abc4-367e-8034-2cf861f1e735","product":{"name":"dotnet-sdk-dbg-9.0-0:9.0.119-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"53143cb6-dd27-3c00-951d-becd1bffb6a7","product":{"name":"dotnet-sdk-dbg-9.0-0:9.0.119-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"68c2155b-93c2-3cdf-bcfc-c8a15577f72c","product":{"name":"dotnet-hostfxr-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6fcbd201-dc3a-307c-879d-57c91d5c68a6","product":{"name":"dotnet-sdk-aot-9.0-0:9.0.119-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7298d996-0d92-3ba0-88cb-65761e12140a","product":{"name":"dotnet-sdk-9.0-source-built-artifacts-0:9.0.119-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"87b31fd6-d56b-3e2d-a54a-4ae6972b62b4","product":{"name":"dotnet-sdk-9.0-0:9.0.119-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"88508908-9fc0-37f2-a961-279684e771c9","product":{"name":"dotnet-runtime-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"8d0ff887-d534-3001-86de-1010839737b1","product":{"name":"dotnet-apphost-pack-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"901b25e7-4fc1-34ed-be64-c0413b6c9e3f","product":{"name":"aspnetcore-runtime-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a0b673af-ca13-30a9-a72a-aff1f549f7b6","product":{"name":"dotnet-runtime-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a5aa420f-3c1a-3c43-9cf4-c6d22325e712","product":{"name":"aspnetcore-targeting-pack-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a7fafd6b-593e-3d16-b49d-75ef383f523d","product":{"name":"dotnet-sdk-9.0-source-built-artifacts-0:9.0.119-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b37bcb9d-3740-3374-bd98-d8530b3bffac","product":{"name":"netstandard-targeting-pack-2.1-0:9.0.119-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b555e12a-45c7-3a92-a7f5-93ee882a2f48","product":{"name":"dotnet-runtime-dbg-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"bbf4c91f-b3dc-31d6-97d3-becf1ed355d3","product":{"name":"dotnet-hostfxr-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c1166224-dabd-3cdb-b834-3b6efc772bce","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"c375bfad-0732-3ccd-a8b6-ffd7f30b92b2","product":{"name":"dotnet-runtime-dbg-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"d3b6c20e-b614-3a16-afd1-0abcaf4aabb0","product":{"name":"aspnetcore-runtime-dbg-9.0-0:9.0.18-2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ed5fa5e2-89e4-3d50-bb71-5b8bad7551a4","product":{"name":"dotnet9.0-0:9.0.119-2.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f0cf4afb-0006-33ab-8cd3-fb26ca2a0f6d","product":{"name":"aspnetcore-targeting-pack-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f3aec754-ea4d-3ff7-aaf1-923adc5a8913","product":{"name":"dotnet-sdk-9.0-0:9.0.119-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ff4a4753-3694-3f2d-af99-dceb89854886","product":{"name":"aspnetcore-runtime-dbg-9.0-0:9.0.18-2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"57a6605b-b0a4-3e48-9b8d-b4e44e2d33a0","advisory":{"id":"RHSA-2026:66863","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 12, 2026, 4:55:43 AM","dateUpdated":"Oct 23, 2026, 4:33:32 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:66863\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66863.json\n","aliases":"CVE-2026-58649\nCVE-2026-69304\nCVE-2026-69806\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"030bf215-225f-31ea-9dd3-9182c44ff3ac","product":{"name":"dotnet-runtime-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"06362455-9ae5-393c-b12c-412b87f01e12","product":{"name":"aspnetcore-runtime-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"075b5bea-eee3-3ed6-9ee4-61455f47e5bc","product":{"name":"dotnet-host-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"1a551cbc-9b64-3df6-a887-91ba360553d3","product":{"name":"dotnet-sdk-aot-10.0-0:10.0.112-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"23cf6284-b907-3732-945b-ab0be075fe58","product":{"name":"aspnetcore-targeting-pack-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"2f8d5783-06f2-3e70-8a05-08d9188649b4","product":{"name":"aspnetcore-runtime-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"372aab8a-5324-3ec2-ae02-79f473e21d4b","product":{"name":"dotnet-sdk-10.0-source-built-artifacts-0:10.0.112-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4d01711c-e4fe-3f54-a915-71d4a98d612c","product":{"name":"dotnet-runtime-dbg-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5966ec66-1af5-36e1-a956-577ce00f5fdf","product":{"name":"dotnet-targeting-pack-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"5fe329e7-ba7e-3df9-8d7e-e199331811ff","product":{"name":"dotnet-sdk-10.0-0:10.0.112-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6aeda735-a60e-3afa-9e2f-f0e1028a8dd1","product":{"name":"dotnet-hostfxr-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6bbfe2ba-0968-37fe-abfe-ab2dcff35520","product":{"name":"aspnetcore-targeting-pack-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6c7d478f-2094-3b71-9002-43b50ec34c02","product":{"name":"dotnet-templates-10.0-0:10.0.112-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6ce19a2b-c9da-3de4-8d2b-e0e6863aa136","product":{"name":"dotnet-runtime-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6d83b33b-44da-31af-8001-9f68bd3c43c1","product":{"name":"dotnet-sdk-10.0-source-built-artifacts-0:10.0.112-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6f8a316e-95b3-3ee1-afc7-aabefec99e10","product":{"name":"dotnet-sdk-dbg-10.0-0:10.0.112-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a299830e-28d1-3ce3-9a97-a066606cb8a7","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"b0aa7814-2287-3bc9-9bfc-e728ac006737","product":{"name":"dotnet-apphost-pack-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b56a065a-bc5c-3a85-a8c6-8546be656434","product":{"name":"dotnet-sdk-10.0-0:10.0.112-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b6bb77fa-8cec-36ab-9bd0-a78bc4aaa646","product":{"name":"dotnet-sdk-dbg-10.0-0:10.0.112-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ba47e3bb-e7bc-37ce-832b-ba9b0d81f133","product":{"name":"dotnet10.0-0:10.0.112-1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"c35316ac-8e2e-3846-a152-2710c0c543d4","product":{"name":"dotnet-runtime-dbg-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d06460f0-2d1a-3a48-a7d1-523017603b6e","product":{"name":"dotnet-templates-10.0-0:10.0.112-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"d34f7c5f-fa90-3af6-929b-06a33b671c23","product":{"name":"aspnetcore-runtime-dbg-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ea485d6f-ac5e-3273-a1fb-f1a904bbfb41","product":{"name":"dotnet-targeting-pack-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"eae41679-6b3f-3b28-bd6b-8de16763e810","product":{"name":"dotnet-host-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"eb10049a-3872-322c-a7c1-5d395da03bc6","product":{"name":"dotnet-hostfxr-10.0-0:10.0.12-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f09d1a29-b6d8-3409-bedf-eb959cf68611","product":{"name":"dotnet-sdk-aot-10.0-0:10.0.112-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"f13c8bcd-5709-3015-ad54-5a2119a9eccb","product":{"name":"aspnetcore-runtime-dbg-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"fa50b53c-efa1-3318-83d9-7c9d95c43fb3","product":{"name":"dotnet-apphost-pack-10.0-0:10.0.12-1.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"744ee52a-0039-3393-9f4d-d6da2e38ab65","advisory":{"id":"RHSA-2026:74950","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 2, 2026, 12:29:48 PM","dateUpdated":"Oct 20, 2026, 4:10:50 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74950\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74950.json\n","aliases":"CVE-2026-69304\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"06306eab-1f65-3d6a-9cc3-929acafae816","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"0da49e1e-8393-3ac8-b371-9086addecf2b","product":{"name":"dotnet8.0-0:8.0.130-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"15e61bb6-80a2-3a22-b479-5fb9f18befed","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"163bad2e-b7a5-3658-b675-53a4cc018ed6","product":{"name":"dotnet-hostfxr-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"33850f50-7f00-3497-a81c-3d45d07cfea1","product":{"name":"dotnet-hostfxr-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3cd1c94d-1664-3937-8330-a927c04bc42f","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.130-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"3dc49d9c-4cad-3bf0-a0f5-2331dd766aad","product":{"name":"aspnetcore-runtime-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"43a5b60d-e8ee-3012-bdfc-9670bc28009b","product":{"name":"aspnetcore-runtime-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"62127870-3adb-33ca-9870-ac52847c6ae8","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.130-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"67b6eeae-c4e1-36a0-84cf-6ad971fb8188","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6d0eb9a5-f8ae-3a02-9d35-5412aea43d52","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6f4890bb-cccd-3e8f-9c31-37c1720a5af3","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"7ad1d871-2464-3b24-959c-228a6210730c","product":{"name":"dotnet-sdk-8.0-0:8.0.130-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7d9a16a4-5aa2-3517-8240-0987dfaa2007","product":{"name":"dotnet-templates-8.0-0:8.0.130-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9142697d-bf70-34e1-900f-7e201ae845f1","product":{"name":"dotnet-runtime-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"96143e8d-33b2-34e2-b15d-4b5be30ade3d","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.130-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9e016222-5a25-327b-8e30-00dbebeac9ed","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9f38bcc1-815e-360b-9ebf-947d8145c35d","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a7e54629-d674-3337-9e60-2dba64cb34e3","product":{"name":"dotnet-sdk-8.0-0:8.0.130-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c97523a3-ab56-32cc-b4f1-860c2c6a46d9","product":{"name":"dotnet-templates-8.0-0:8.0.130-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"cfc8f920-fdfc-3ddf-8259-4f6a8180cf64","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.30-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d5526bf4-703c-3086-b40c-6e3dbe050adf","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.130-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"daec656a-8348-3528-a3ed-36d3c1f486d9","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ef5a176b-587f-3d2a-b6e9-386ab5e4ed7f","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"fbff16b2-9270-3304-899d-77f799701271","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ff136aa0-8dd1-33a7-8cdb-a1286afd324e","product":{"name":"dotnet-runtime-8.0-0:8.0.30-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"cae27ac3-8200-36d8-a48f-7c3c17ea0202","advisory":{"id":"msrc_CVE-2026-69304","description":"ASP.NET Core Denial of Service Vulnerability","datePublished":"Sep 8, 2026, 7:00:00 AM","dateUpdated":"Sep 8, 2026, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-69304.json\n","aliases":"CVE-2026-69304\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"0a030740-0a94-3224-bbe2-9e4e5d92e3ed","product":{"name":"ASP.NET Core 10.0","vendor":{"name":"Microsoft"}}},{"id":"11b5626f-2e19-3d0e-a1ae-5a2ba5f0ec7c","product":{"name":"ASP.NET Core 9.0","vendor":{"name":"Microsoft"}}},{"id":"18b3df47-9589-3123-a15b-ee3df373e138","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"3a9db235-e804-3250-8a15-2abad0f58111","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"5fa02514-1908-39f6-9742-27737cf8f132","product":{"name":"9.0.20","vendor":{"name":"open source"}}},{"id":"6c6a7aad-754b-35a6-a8b3-148a26ba3aaa","product":{"name":"11.0 RC1","vendor":{"name":"Microsoft"}}},{"id":"71aba907-d01d-3196-9b56-315d63b81f27","product":{"name":"10.0.12","vendor":{"name":"Grafana"}}},{"id":"76d17fb6-55fe-380b-91d4-cabbc87f1458","product":{"name":"17.14.40","vendor":{"name":"Microsoft"}}},{"id":"8054ee0a-f9f2-308c-a5cc-c46f29fd8570","product":{"name":"ASP.NET Core 8.0","vendor":{"name":"Microsoft"}}},{"id":"942c976c-ac7d-3117-90e7-e9a311e86505","product":{"name":"8.0.31","vendor":{"name":"Microsoft"}}},{"id":"9fc7d0bf-b4b7-329f-a01d-91cb09c7f544","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}}},{"id":"ad7f4e67-7ea7-3e13-b027-1927c994e1d5","product":{"name":"18.9.3","vendor":{"name":"open source"}}},{"id":"b12be7c7-d99b-356a-b47d-e18d151f10ba","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"b316ec8f-8ed6-301f-bf01-e4b7c8ba2f95","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"dfe17210-02ee-30fe-ba65-b63c5c6bd95b","product":{"name":"ASP.NET Core 11.0","vendor":{"name":"Microsoft"}}}]}},{"id":"d8b27dd3-e9da-3b66-9e63-52a668027fbc","advisory":{"id":"NCSC-2026-0351","description":"Kwetsbaarheden verholpen in Microsoft Developer Tools","datePublished":"Sep 8, 2026, 6:47:43 PM","dateUpdated":"Sep 8, 2026, 6:47:43 PM","baseScore":0.0,"references":"","aliases":"CVE-2026-57099\nCVE-2026-58649\nCVE-2026-69304\nCVE-2026-70334\nCVE-2026-78461\nCVE-2026-78462\nCVE-2026-81356\nCVE-2026-81357\nCVE-2026-81376\nCVE-2026-81377\nCVE-2026-81378\nCVE-2026-81379\nCVE-2026-81380\nCVE-2026-81381\nCVE-2026-81383\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"06874181-99bc-366c-bc6b-97d8b0cec9f7","product":{"name":".NET 8.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"20313af4-2f8e-375f-a5cd-a3c5d09da13c","product":{"name":".NET 9.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"381d8f26-e994-3057-90b0-7449e8bd1967","product":{"name":"Visual Studio Code","vendor":{"name":"Microsoft"}}},{"id":"56e372d4-611c-38fa-b7ef-e75c99361bc4","product":{"name":".NET 9.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"5c99edf7-3c82-3786-b1df-4d66e285542c","product":{"name":"ASP.NET Core 8.0","vendor":{"name":"Microsoft"}}},{"id":"66544998-e66a-399d-8dde-862b113c8707","product":{"name":"ASP.NET Core 10.0","vendor":{"name":"Microsoft"}}},{"id":"76997080-8843-3e59-b1fd-264279881aff","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"94cad3f4-0c12-3667-8d2b-6364b510e56a","product":{"name":"Microsoft.AspNetCore.OData","vendor":{"name":"Microsoft"}}},{"id":"9a948ae9-8187-3d0c-9951-4877248e1684","product":{"name":".NET 10.0 installed on Linux","vendor":{"name":"Microsoft"}}},{"id":"a7a69d50-1a24-3d64-9976-d450f060fd5b","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"c99a8337-3b8e-3c2f-a0fd-ff0d0ba8a94b","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"cdc62b1d-fa8c-3c16-8f86-b2656430e67b","product":{"name":".NET 10.0 installed on Mac OS","vendor":{"name":"Microsoft"}}},{"id":"e7bb5d36-06c0-30d7-be05-c675803a6af4","product":{"name":".NET 8.0 installed on Linux","vendor":{"name":"Microsoft"}}}]}}]}