Home Latest vulnerabilities dotnet8 PatchFirst · Latest vulnerabilities
dotnet8 vulnerabilities Vulnerabilities published for dotnet8 in the last 30 days: 25. Listed in the KEV catalogue: 0.
Do you use dotnet8? The list contains 76 vulnerabilities. Find out in a minute whether anything on this list affects your server — the check is free.
Check your server for free MessagePack: Nested arrays can blow past buffer length limits MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressu
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 15, 2026 Updated October 15, 2026
.NET Denial of Service Vulnerability Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Denial of Service Vulnerability Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Denial of Service Vulnerability Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Denial of Service Vulnerability Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Security Feature Bypass Vulnerability Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Remote Code Execution Vulnerability Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Remote Code Execution Vulnerability Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Denial of Service Vulnerability Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Elevation of Privilege Vulnerability Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Elevation of Privilege Vulnerability Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
.NET Denial of Service Vulnerability Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Tampering Vulnerability Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Denial of Service Vulnerability Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
Active Directory Federation Services (AD FS) Spoofing Vulnerability Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Security Feature Bypass Vulnerability Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Denial of Service Vulnerability Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Elevation of Privilege Vulnerability Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
ASP.NET Core Denial of Service Vulnerability Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Update to 8.0.132-8.0.32-0ubuntu1~22.04.1 Published October 13, 2026 Updated October 27, 2026
Check your server Check your installed stack and versions against the current vulnerability feeds.
Check your server →