Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ASP.NET Core 10.0
Vendor
Microsoft
Product
ASP.NET Core 10.0
Platforms
Unknown
Default status
Unknown
ASP.NET Core 10.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0
affected
custom
10.0.13
Unavailable
None listed
ASP.NET Core 11.0
Vendor
Microsoft
Product
ASP.NET Core 11.0
Platforms
Unknown
Default status
Unknown
ASP.NET Core 11.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.0
affected
custom
11.0.0-rc.2
Unavailable
None listed
ASP.NET Core 8.0
Vendor
Microsoft
Product
ASP.NET Core 8.0
Platforms
Unknown
Default status
Unknown
ASP.NET Core 8.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0
affected
custom
8.0.32
Unavailable
None listed
ASP.NET Core 9.0
Vendor
Microsoft
Product
ASP.NET Core 9.0
Platforms
Unknown
Default status
Unknown
ASP.NET Core 9.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.0
affected
custom
9.0.21
Unavailable
None listed
Microsoft Visual Studio 2022 version 17.14
Vendor
Microsoft
Product
Microsoft Visual Studio 2022 version 17.14
Platforms
Unknown
Default status
Unknown
Microsoft Visual Studio 2022 version 17.14 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
17.14.0
affected
custom
17.14.42
Unavailable
None listed
Microsoft Visual Studio 2026 version 18.10
Vendor
Microsoft
Product
Microsoft Visual Studio 2026 version 18.10
Platforms
Unknown
Default status
Unknown
Microsoft Visual Studio 2026 version 18.10 · Scoped product and version facts