Patch tracker / Products / ASP.NET Core 9.0

ASP.NET Core 9.0: vulnerabilities and security updates

Every CVE affecting ASP.NET Core 9.0 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
42
Updates (KBs)
6
Actively exploited (KEV)
0
Critical Severity
4

CVEs affecting ASP.NET Core 9.0

CVESeverityCVSSEPSSStatus
CVE-2025-55315Critical9.966%-
CVE-2025-55247High7.366%-
CVE-2025-55248Medium4.866%-
CVE-2026-105016Critical9.82.1%-
CVE-2026-69522High8.83.6%-
CVE-2026-88092Critical9.41.3%-
CVE-2026-70188Critical9.11.3%-
CVE-2026-70007High8.82.1%-
CVE-2026-70035High8.82.1%-
CVE-2026-70174High8.82.1%-
CVE-2026-83520High8.82.1%-
CVE-2026-85363High8.82.1%-
CVE-2026-96224High8.82.1%-
CVE-2026-96235High8.81.3%-
CVE-2026-69439High8.80.9%-
CVE-2026-71328High8.80.9%-
CVE-2026-45490High7.82.4%-
CVE-2026-70175High8.11.3%-
CVE-2026-70197High8.11.3%-
CVE-2026-26127High7.52.5%-
CVE-2026-26130High7.52.5%-
CVE-2026-45591High7.52.4%-
CVE-2026-96225High7.81.3%-
CVE-2026-96231High7.81.3%-
CVE-2026-58280High7.52.1%-
CVE-2026-69651High7.52.1%-
CVE-2026-96233High7.52.1%-
CVE-2026-70183High7.51.3%-
CVE-2026-70186High7.51.3%-
CVE-2026-96232High7.51.3%-
CVE-2026-96236High7.51.3%-
CVE-2026-96237High7.51.3%-
CVE-2025-24070High7.01.0%-
CVE-2026-69806High7.00.9%-
CVE-2026-45491Medium6.22.4%-
CVE-2026-96229Medium6.51.3%-
CVE-2026-96238Medium6.51.3%-
CVE-2026-58649Medium6.50.9%-
CVE-2026-66822Medium5.91.3%-
CVE-2026-70196Medium5.91.3%-
CVE-2026-69304Medium5.90.9%-
CVE-2026-96234Medium5.31.3%-

Updates (KBs) for ASP.NET Core 9.0

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50683322025-10-14Critical9.966%3-
KB51300352026-10-13Critical9.81.3%27-
KB51261052026-09-08High8.80.9%6-
KB50971502026-06-09High7.82.4%3-
KB50812782026-03-10High7.52.5%2-
KB50542302025-03-11High7.01.0%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5122882: patch details KB5123099: the full CVE list KB5129235 download and what it fixes KB5122871 install notes and severity KB5129238: the full CVE list KB5120708: patch details KB5129241: patch details KB5129239: the full CVE list
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.