ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 457/464 docs · 7/9 advisories · checked 07:40 UTC Customize Public modeDiscuss ChangeIntel on Discord
Advisory catalogCVE-2026-70181
CVE-2026-70181Published

ASP.NET Core Denial of Service Vulnerability

Recorded JSON

cve-program · CVE-2026-70181

Published

ASP.NET Core 10.0

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "ASP.NET Core 10.0",
                    "versions": [
                        {
                            "version": "10.0",
                            "lessThan": "10.0.13",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

ASP.NET Core 8.0

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "ASP.NET Core 8.0",
                    "versions": [
                        {
                            "version": "8.0",
                            "lessThan": "8.0.32",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

ASP.NET Core 9.0

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "ASP.NET Core 9.0",
                    "versions": [
                        {
                            "version": "9.0",
                            "lessThan": "9.0.21",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2022 version 17.14

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2022 version 17.14",
                    "versions": [
                        {
                            "version": "17.14.0",
                            "lessThan": "17.14.42",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2026 version 18.10

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2026 version 18.10",
                    "versions": [
                        {
                            "version": "18.10.0",
                            "lessThan": "18.10.4",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

osv · GHSA-w5qq-qrpp-rf4c

Published

Microsoft.AspNetCore.App.Runtime.linux-arm

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.linux-arm64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.linux-musl-arm

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.linux-musl-x64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.linux-x64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.osx-arm64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.osx-x64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.win-arm

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

Microsoft.AspNetCore.App.Runtime.win-arm64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.win-x64

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.win-x86

NuGet

ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21

21 explicitly affected versions

9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9

Microsoft.AspNetCore.App.Runtime.linux-arm

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.linux-arm64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.linux-musl-arm

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.linux-musl-x64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.linux-x64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.osx-arm64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.osx-x64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.win-arm

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

Microsoft.AspNetCore.App.Runtime.win-arm64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.win-x64

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.win-x86

NuGet

ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13

13 explicitly affected versions

10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9

Microsoft.AspNetCore.App.Runtime.linux-arm

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.linux-arm64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.linux-musl-arm

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.linux-musl-x64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.linux-x64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.osx-arm64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.osx-x64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.win-arm

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

Microsoft.AspNetCore.App.Runtime.win-arm64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.win-x64

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

Microsoft.AspNetCore.App.Runtime.win-x86

NuGet

ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32

31 explicitly affected versions

8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 07:40 UTC · 271 of 271 readable · 269 fully read · documentation 457/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.