ASP.NET Core

Everything Malware Chronicle has reported about ASP.NET Core: 2 stories, newest first. Part of our Vulnerabilities coverage.

14 Oct
Vulnerabilities

Update ASP.NET Core 8-11 to Block Unauthenticated DoS via Synthetic Culture Names in Localization Logic

Microsoft released patches for CVE-2026-96236, a high-severity denial-of-service vulnerability in ASP.NET Core localization logic affecting versions 8 through 11.

14 Oct
Vulnerabilities

Upgrade .NET 8, 9, 10 Negotiate Auth to 8.0.32, 9.0.21, 10.0.13 to Stop LDAP Spoofing

Microsoft patches CVE-2026-70179, a high-severity flaw allowing authenticated attackers to elevate privileges via LDAP spoofing in ASP.NET Core applications.