{"schema_version":1,"title":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 27 vulnerabilities in Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet): 8 in the last 7 days and 8 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-70186, was published on 13 October 2026. 8 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0.","url":"https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-musl-arm","json_url":"https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-musl-arm.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-musl-arm","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":11,"all_time":27,"critical":2,"exploited":0,"last_7_days":8,"last_30_days":8,"last_90_days":8,"last_365_days":11},"latest":[{"cve":"CVE-2026-70186","cvss":7.5,"epss":0.0085,"slug":"cve-2026-70186-microsoft-security-advisory-asp-net-core-denial-of-service","title":"ASP.NET Core Kestrel denial of service in HTTP/3 handling","severity":"high","exploited":false,"published_at":"2026-10-13T20:53:19+00:00","url":"https://junglewise.ai/threats/cve-2026-70186-microsoft-security-advisory-asp-net-core-denial-of-service"},{"cve":"CVE-2026-70188","cvss":9.1,"epss":0.0083,"slug":"cve-2026-70188-microsoft-security-advisory-asp-net-core-security-feature-bypass","title":"Microsoft ASP.NET Core Kestrel HTTP request smuggling in HTTP/2","severity":"critical","exploited":false,"published_at":"2026-10-13T20:37:27+00:00","url":"https://junglewise.ai/threats/cve-2026-70188-microsoft-security-advisory-asp-net-core-security-feature-bypass"},{"cve":"CVE-2026-96236","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96236-microsoft-security-advisory-asp-net-core-denial-of-service","title":"Microsoft ASP.NET Core Localization denial of service","severity":"high","exploited":false,"published_at":"2026-10-13T20:36:22+00:00","url":"https://junglewise.ai/threats/cve-2026-96236-microsoft-security-advisory-asp-net-core-denial-of-service"},{"cve":"CVE-2026-70183","cvss":7.5,"epss":0.0046,"slug":"cve-2026-70183-microsoft-security-advisory-asp-net-core-security-feature-bypass","title":"Microsoft ASP.NET Core authorization bypass in Blazor AuthorizeRouteView","severity":"high","exploited":false,"published_at":"2026-10-13T19:59:23+00:00","url":"https://junglewise.ai/threats/cve-2026-70183-microsoft-security-advisory-asp-net-core-security-feature-bypass"},{"cve":"CVE-2026-70196","cvss":5.9,"epss":0.008,"slug":"cve-2026-70196-microsoft-security-advisory-asp-net-core-denial-of-service","title":"ASP.NET Core denial of service in FormPipeReader","severity":"medium","exploited":false,"published_at":"2026-10-13T19:58:12+00:00","url":"https://junglewise.ai/threats/cve-2026-70196-microsoft-security-advisory-asp-net-core-denial-of-service"},{"cve":"CVE-2026-70181","cvss":7.5,"epss":0.0106,"slug":"cve-2026-70181-microsoft-security-advisory-asp-net-core-denial-of-service","title":"Microsoft ASP.NET Core denial of service in multipart processing","severity":"high","exploited":false,"published_at":"2026-10-13T19:47:44+00:00","url":"https://junglewise.ai/threats/cve-2026-70181-microsoft-security-advisory-asp-net-core-denial-of-service"},{"cve":"CVE-2026-70175","cvss":8.1,"epss":0.0064,"slug":"cve-2026-70175-microsoft-security-advisory-asp-net-core-elevation-of-privilege","title":"Microsoft ASP.NET Core Identity weak password recovery in confirmation flow","severity":"high","exploited":false,"published_at":"2026-10-13T19:44:54+00:00","url":"https://junglewise.ai/threats/cve-2026-70175-microsoft-security-advisory-asp-net-core-elevation-of-privilege"},{"cve":"CVE-2026-88092","cvss":9.4,"epss":0.008,"slug":"cve-2026-88092-microsoft-security-advisory-asp-net-core-security-feature-bypass","title":"Microsoft ASP.NET Core Kestrel HTTP request smuggling","severity":"critical","exploited":false,"published_at":"2026-10-13T19:21:27.043+00:00","url":"https://junglewise.ai/threats/cve-2026-88092-microsoft-security-advisory-asp-net-core-security-feature-bypass"},{"cve":"CVE-2026-56170","cvss":7.5,"epss":0.0117,"slug":"cve-2026-56170-microsoft-asp-net-core-denial-of-service-via-resource-exhaustion","title":"Microsoft ASP.NET Core denial of service via resource exhaustion","severity":"high","exploited":false,"published_at":"2026-07-14T17:17:10.14+00:00","url":"https://junglewise.ai/threats/cve-2026-56170-microsoft-asp-net-core-denial-of-service-via-resource-exhaustion"},{"cve":"CVE-2026-42899","cvss":7.5,"epss":0.0244,"slug":"cve-2026-42899-microsoft-asp-net-core-infinite-loop-denial-of-service","title":"Microsoft ASP.NET Core infinite loop denial of service","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:26.733+00:00","url":"https://junglewise.ai/threats/cve-2026-42899-microsoft-asp-net-core-infinite-loop-denial-of-service"},{"cve":"CVE-2026-26130","cvss":7.5,"epss":0.0244,"slug":"cve-2026-26130-microsoft-asp-net-core-denial-of-service-via-uncontrolled","title":"Microsoft ASP.NET Core denial of service via uncontrolled resource allocation","severity":"high","exploited":false,"published_at":"2026-03-10T18:18:42.223+00:00","url":"https://junglewise.ai/threats/cve-2026-26130-microsoft-asp-net-core-denial-of-service-via-uncontrolled"},{"cve":"CVE-2025-55315","cvss":3.1,"epss":0.6594,"slug":"cve-2025-55315-microsoft-security-advisory-net-security-feature-bypass","title":"Microsoft Security Advisory : .NET Security Feature Bypass Vulnerability","severity":"low","exploited":false,"published_at":"2025-10-14T20:32:06+00:00","url":"https://junglewise.ai/threats/cve-2025-55315-microsoft-security-advisory-net-security-feature-bypass"},{"cve":"CVE-2025-24070","cvss":3.1,"epss":0.0099,"slug":"cve-2025-24070-microsoft-security-advisory-net-elevation-of-privilege","title":"Microsoft Security Advisory : .NET Elevation of Privilege Vulnerability","severity":"low","exploited":false,"published_at":"2025-03-11T19:24:11+00:00","url":"https://junglewise.ai/threats/cve-2025-24070-microsoft-security-advisory-net-elevation-of-privilege"},{"cve":"CVE-2024-38229","cvss":3.1,"epss":0.0208,"slug":"cve-2024-38229-microsoft-security-advisory-net-remote-code-execution","title":"Microsoft Security Advisory | .NET Remote Code Execution Vulnerability","severity":"low","exploited":false,"published_at":"2024-10-08T17:43:46+00:00","url":"https://junglewise.ai/threats/cve-2024-38229-microsoft-security-advisory-net-remote-code-execution"},{"cve":"CVE-2024-35264","cvss":3.1,"epss":0.0257,"slug":"cve-2024-35264-microsoft-security-advisory-net-remote-code-execution","title":"Microsoft Security Advisory | .NET Remote Code Execution Vulnerability","severity":"low","exploited":false,"published_at":"2024-07-09T21:14:23+00:00","url":"https://junglewise.ai/threats/cve-2024-35264-microsoft-security-advisory-net-remote-code-execution"},{"cve":"CVE-2024-30046","cvss":3.1,"epss":0.0169,"slug":"cve-2024-30046-microsoft-security-advisory-net-denial-of-service-vulnerability","title":"Microsoft Security Advisory | .NET Denial of Service Vulnerability","severity":"low","exploited":false,"published_at":"2024-05-14T20:31:00+00:00","url":"https://junglewise.ai/threats/cve-2024-30046-microsoft-security-advisory-net-denial-of-service-vulnerability"},{"cve":"CVE-2024-21386","cvss":3.1,"epss":0.024,"slug":"cve-2024-21386-microsoft-security-advisory-net-denial-of-service-vulnerability","title":"Microsoft Security Advisory : .NET Denial of Service Vulnerability","severity":"low","exploited":false,"published_at":"2024-02-13T19:49:43+00:00","url":"https://junglewise.ai/threats/cve-2024-21386-microsoft-security-advisory-net-denial-of-service-vulnerability"},{"cve":"CVE-2022-34716","cvss":3.1,"epss":0.0227,"slug":"cve-2022-34716-net-information-disclosure-vulnerability","title":".NET Information Disclosure Vulnerability","severity":"low","exploited":false,"published_at":"2024-02-03T00:47:54+00:00","url":"https://junglewise.ai/threats/cve-2022-34716-net-information-disclosure-vulnerability"},{"cve":"CVE-2023-33170","cvss":3.1,"epss":0.0198,"slug":"cve-2023-33170-microsoft-security-advisory-net-security-feature-bypass","title":"Microsoft Security Advisory : .NET Security Feature Bypass Vulnerability","severity":"low","exploited":false,"published_at":"2023-07-11T22:45:20+00:00","url":"https://junglewise.ai/threats/cve-2023-33170-microsoft-security-advisory-net-security-feature-bypass"},{"cve":"CVE-2022-23267","cvss":3.1,"epss":0.0531,"slug":"cve-2022-23267-net-denial-of-service-vulnerability","title":".NET Denial of Service Vulnerability","severity":"low","exploited":false,"published_at":"2022-10-21T20:50:24+00:00","url":"https://junglewise.ai/threats/cve-2022-23267-net-denial-of-service-vulnerability"},{"cve":"CVE-2022-24464","cvss":7.5,"epss":0.0355,"slug":"cve-2022-24464-microsoft-net-denial-of-service-in-http-form-parsing","title":"Microsoft .NET denial of service in HTTP form parsing","severity":"high","exploited":false,"published_at":"2022-10-21T20:32:34+00:00","url":"https://junglewise.ai/threats/cve-2022-24464-microsoft-net-denial-of-service-in-http-form-parsing"},{"cve":"CVE-2022-21986","cvss":3.1,"epss":0.0374,"slug":"cve-2022-21986-net-denial-of-service-vulnerability","title":".NET Denial of Service Vulnerability","severity":"low","exploited":false,"published_at":"2022-10-21T20:29:04+00:00","url":"https://junglewise.ai/threats/cve-2022-21986-net-denial-of-service-vulnerability"},{"cve":"CVE-2022-38013","cvss":7.5,"epss":0.0401,"slug":"cve-2022-38013-microsoft-net-stack-overflow-in-asp-net-core-model-binding","title":"Microsoft .NET stack overflow in ASP.NET Core model binding","severity":"high","exploited":false,"published_at":"2022-09-15T03:25:36+00:00","url":"https://junglewise.ai/threats/cve-2022-38013-microsoft-net-stack-overflow-in-asp-net-core-model-binding"},{"cve":"CVE-2022-29145","cvss":7.5,"epss":0.0506,"slug":"cve-2022-29145-microsoft-net-denial-of-service-in-html-form-parsing","title":"Microsoft .NET denial of service in HTML form parsing","severity":"high","exploited":false,"published_at":"2022-08-30T19:35:52+00:00","url":"https://junglewise.ai/threats/cve-2022-29145-microsoft-net-denial-of-service-in-html-form-parsing"},{"cve":"CVE-2022-29117","cvss":3.1,"epss":0.053,"slug":"cve-2022-29117-net-denial-of-service-vulnerability","title":".NET Denial of Service Vulnerability","severity":"low","exploited":false,"published_at":"2022-08-30T19:32:29+00:00","url":"https://junglewise.ai/threats/cve-2022-29117-net-denial-of-service-vulnerability"}],"weekly":[{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":2,"exploited":0,"vulnerabilities":8},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft.ChakraCore (NuGet)","slug":"microsoft-chakracore","vulnerabilities":247,"url":"https://junglewise.ai/threats/technologies/microsoft-chakracore"},{"name":"Magick.NET-Q16-AnyCPU (NuGet)","slug":"magick-net-q16-anycpu","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-anycpu"},{"name":"Magick.NET-Q16-HDRI-AnyCPU (NuGet)","slug":"magick-net-q16-hdri-anycpu","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-anycpu"},{"name":"Magick.NET-Q8-AnyCPU (NuGet)","slug":"magick-net-q8-anycpu","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-anycpu"},{"name":"Magick.NET-Q16-HDRI-x86 (NuGet)","slug":"magick-net-q16-hdri-x86","vulnerabilities":159,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x86"},{"name":"Magick.NET-Q16-x86 (NuGet)","slug":"magick-net-q16-x86","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-x86"},{"name":"Magick.NET-Q8-x86 (NuGet)","slug":"magick-net-q8-x86","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-x86"},{"name":"Magick.NET-Q16-arm64 (NuGet)","slug":"magick-net-q16-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-arm64"},{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-hdri-openmp-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-openmp-arm64"},{"name":"Magick.NET-Q16-HDRI-x64 (NuGet)","slug":"magick-net-q16-hdri-x64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x64"},{"name":"Magick.NET-Q16-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-openmp-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-arm64"},{"name":"Magick.NET-Q16-OpenMP-x64 (NuGet)","slug":"magick-net-q16-openmp-x64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-x64"}],"technology":{"hub":true,"name":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet)","slug":"microsoft-aspnetcore-app-runtime-linux-musl-arm","vendor":{"hub":true,"name":"NuGet","slug":"nuget","url":"https://junglewise.ai/threats/vendors/nuget"},"aliases":[],"homepage":"https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm","repo_url":"https://github.com/dotnet/aspnetcore","description":"A NuGet package containing the ASP.NET Core runtime for Linux with musl libc on ARM architectures.","url":"https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-musl-arm"},"most_severe":[{"cve":"CVE-2026-88092","cvss":9.4,"epss":0.008,"slug":"cve-2026-88092-microsoft-security-advisory-asp-net-core-security-feature-bypass","title":"Microsoft ASP.NET Core Kestrel HTTP request smuggling","severity":"critical","exploited":false,"published_at":"2026-10-13T19:21:27.043+00:00","url":"https://junglewise.ai/threats/cve-2026-88092-microsoft-security-advisory-asp-net-core-security-feature-bypass"},{"cve":"CVE-2026-70188","cvss":9.1,"epss":0.0083,"slug":"cve-2026-70188-microsoft-security-advisory-asp-net-core-security-feature-bypass","title":"Microsoft ASP.NET Core Kestrel HTTP request smuggling in HTTP/2","severity":"critical","exploited":false,"published_at":"2026-10-13T20:37:27+00:00","url":"https://junglewise.ai/threats/cve-2026-70188-microsoft-security-advisory-asp-net-core-security-feature-bypass"},{"cve":"CVE-2026-70175","cvss":8.1,"epss":0.0064,"slug":"cve-2026-70175-microsoft-security-advisory-asp-net-core-elevation-of-privilege","title":"Microsoft ASP.NET Core Identity weak password recovery in confirmation flow","severity":"high","exploited":false,"published_at":"2026-10-13T19:44:54+00:00","url":"https://junglewise.ai/threats/cve-2026-70175-microsoft-security-advisory-asp-net-core-elevation-of-privilege"},{"cve":"CVE-2022-29145","cvss":7.5,"epss":0.0506,"slug":"cve-2022-29145-microsoft-net-denial-of-service-in-html-form-parsing","title":"Microsoft .NET denial of service in HTML form parsing","severity":"high","exploited":false,"published_at":"2022-08-30T19:35:52+00:00","url":"https://junglewise.ai/threats/cve-2022-29145-microsoft-net-denial-of-service-in-html-form-parsing"},{"cve":"CVE-2022-38013","cvss":7.5,"epss":0.0401,"slug":"cve-2022-38013-microsoft-net-stack-overflow-in-asp-net-core-model-binding","title":"Microsoft .NET stack overflow in ASP.NET Core model binding","severity":"high","exploited":false,"published_at":"2022-09-15T03:25:36+00:00","url":"https://junglewise.ai/threats/cve-2022-38013-microsoft-net-stack-overflow-in-asp-net-core-model-binding"},{"cve":"CVE-2022-24464","cvss":7.5,"epss":0.0355,"slug":"cve-2022-24464-microsoft-net-denial-of-service-in-http-form-parsing","title":"Microsoft .NET denial of service in HTTP form parsing","severity":"high","exploited":false,"published_at":"2022-10-21T20:32:34+00:00","url":"https://junglewise.ai/threats/cve-2022-24464-microsoft-net-denial-of-service-in-http-form-parsing"},{"cve":"CVE-2026-42899","cvss":7.5,"epss":0.0244,"slug":"cve-2026-42899-microsoft-asp-net-core-infinite-loop-denial-of-service","title":"Microsoft ASP.NET Core infinite loop denial of service","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:26.733+00:00","url":"https://junglewise.ai/threats/cve-2026-42899-microsoft-asp-net-core-infinite-loop-denial-of-service"},{"cve":"CVE-2026-26130","cvss":7.5,"epss":0.0244,"slug":"cve-2026-26130-microsoft-asp-net-core-denial-of-service-via-uncontrolled","title":"Microsoft ASP.NET Core denial of service via uncontrolled resource allocation","severity":"high","exploited":false,"published_at":"2026-03-10T18:18:42.223+00:00","url":"https://junglewise.ai/threats/cve-2026-26130-microsoft-asp-net-core-denial-of-service-via-uncontrolled"},{"cve":"CVE-2026-56170","cvss":7.5,"epss":0.0117,"slug":"cve-2026-56170-microsoft-asp-net-core-denial-of-service-via-resource-exhaustion","title":"Microsoft ASP.NET Core denial of service via resource exhaustion","severity":"high","exploited":false,"published_at":"2026-07-14T17:17:10.14+00:00","url":"https://junglewise.ai/threats/cve-2026-56170-microsoft-asp-net-core-denial-of-service-via-resource-exhaustion"},{"cve":"CVE-2026-96236","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96236-microsoft-security-advisory-asp-net-core-denial-of-service","title":"Microsoft ASP.NET Core Localization denial of service","severity":"high","exploited":false,"published_at":"2026-10-13T20:36:22+00:00","url":"https://junglewise.ai/threats/cve-2026-96236-microsoft-security-advisory-asp-net-core-denial-of-service"}],"generated_at":"2026-10-19T03:07:00.200186+00:00"}