Advisories · Technology
Microsoft ASP.NET Core 6.0.
Every CVE that names Microsoft ASP.NET Core 6.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
EOL ASP.NET Core Elevation of Privilege Vulnerability
- Microsoft ASP.NET Core 6.0
- Microsoft.AspNetCore.Identity
- Authentication bypass
- CVSS 8.8 High
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)