Microsoft.AspNetCore.App.Runtime.win-arm64 vulnerabilities
CVEs whose affected-version data names the Microsoft.AspNetCore.App.Runtime.win-arm64 package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-96236High· 7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
▾ TwilightMicrosoft · Microsoft.AspNetCore.App.Runtime.linux-armvia NVD
CVE-2026-88092Critical· 9.4Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
▾ MidnightMicrosoft · Microsoft.AspNetCore.App.Runtime.linux-armvia NVD
CVE-2026-70186High· 7.5Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
▾ TwilightMicrosoft · Microsoft.AspNetCore.App.Runtime.linux-armvia NVD