Microsoft.aspnetcore.server.kestrel.core
6 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Microsoft.aspnetcore.server.kestrel.core, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Microsoft.aspnetcore.server.kestrel.core CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 1 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 6 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High3
Latest CVEs
The 6 most recently published vulnerabilities affecting Microsoft.aspnetcore.server.kestrel.core.
- CVE-2025-55315ASP.NET Security Feature Bypass Vulnerability9.9
- CVE-2021-1723ASP.NET Core and Visual Studio Denial of Service Vulnerability7.5
- CVE-2019-0564A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique ...7.5
- GHSA-cgpw-2gph-2r9gModerate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core—
- GHSA-3m2r-q8x3-xmf7Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv—
- CVE-2018-0787ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privil...8.8
Product grouping is registry-driven, with AI assist and human review. How it works