HIGH 7.5 Microsoft

CVE-2026-45591

ASP.NET Core Denial of Service Vulnerability

Microsoft Security Update 2026-Jun: ASP.NET Core Denial of Service Vulnerability

Affected Products

Microsoft Visual Studio 2026 version 18.6
.NET 10.0 installed on Windows
.NET 10.0 installed on Mac OS
ASP.NET Core 10.0
.NET 10.0 installed on Linux
ASP.NET Core 8.0
.NET 8.0 installed on Windows
.NET 8.0 installed on Linux

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591
https://nvd.nist.gov/vuln/detail/CVE-2026-45591

Published: 2026-06-09 · Source: Microsoft · Feed updated: 2026-08-04

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-06-09 via Microsoft. Affected: Microsoft Visual Studio 2026 version 18.6, .NET 10.0 installed on Windows, .NET 10.0 installed on Mac OS and 5 more.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.