Microsoft.aspnetcore.identity
5 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Microsoft.aspnetcore.identity, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Microsoft.aspnetcore.identity CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 1 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 1 |
| 2025-08 | 0 |
| 2025-09 | 1 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 5 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High5
Latest CVEs
The 5 most recently published vulnerabilities affecting Microsoft.aspnetcore.identity.
- CVE-2025-36854EOL ASP.NET 6.0 Remote Code Execution Vulnerability8.1
- CVE-2025-7326EOL ASP.NET Core Elevation of Privilege Vulnerability7.0
- CVE-2025-24070ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability7.0
- CVE-2023-33170ASP.NET and Visual Studio Security Feature Bypass Vulnerability8.1
- CVE-2018-8171A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, AS...7.5
Product grouping is registry-driven, with AI assist and human review. How it works