Hosted on MSN

Microsoft kills 9.9-rated ASP.NET Core bug – 'our highest ever' score

Microsoft has patched an ASP.NET Core vulnerability with a CVSS score of 9.9, which security program manager Barry Dorrans said was "our highest ever." The flaw is in the Kestrel web server component ...
CSOonline

Critical ASP.NET core vulnerability earns Microsoft’s highest-ever severity score

The Kestrel web server flaw allows request smuggling attacks, but the actual risk depends on the application code and deployment. Microsoft has patched a critical vulnerability in ASP.NET Core that ...
Bleeping Computer

Microsoft fixes highest-severity ASP.NET Core flaw ever

Earlier this week, Microsoft patched a vulnerability that was flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. This HTTP request smuggling bug (CVE-2025-55315 ...
TechRadar

Microsoft fixes one of its "highest ever" rated security flaws - here's what happened

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. CVE-2025-55315 enables HTTP request smuggling in ASP.NET Core’s Kestrel web server Attackers can ...