CVE-2026-70159 — ASP.NET Core Denial of Service Vulnerability

Affected: Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10, Microsoft.AspNetCore.SignalR.Common, Microsoft.AspNetCore.SignalR.Core

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.10: dotnet10, Ubuntu:26.10: dotnet11, Ubuntu:26.04:LTS: dotnet10

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues.

.NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Most recent entries from all

CVE-2026-70159 — ASP.NET Core Denial of Service Vulnerability

USN-8942-1 — dotnet8, dotnet10, dotnet11 vulnerabilities