{
  "fix": "Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.13",
  "url": "https://patchblox.com/security/fix/windows-app/microsoft.dotnet.hostingbundle.10-10.0.13",
  "summary": "Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.13, released October 5, 2026, fixes 22 CVEs in Microsoft ASP.NET Core Hosting Bundle 10.0. None of them is reported as exploited. Patch Radar priority: High. The latest Microsoft ASP.NET Core Hosting Bundle 10.0 is 10.0.15, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.13",
  "released": "2026-10-05T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-83520, high severity",
  "supported": true,
  "cveCount": 22,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01435,
  "maxCvss": 9.4,
  "appliesTo": [
    {
      "product": "Microsoft ASP.NET Core Hosting Bundle 10.0",
      "productUrl": "https://patchblox.com/security/product/windows-app/microsoft-asp.net-core-hosting-bundle-10.0",
      "fixedVersion": "10.0.13",
      "latestVersion": "10.0.15",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Microsoft ASP.NET Core Hosting Bundle 10.0",
    "latestVersion": "10.0.15",
    "productUrl": "https://patchblox.com/security/product/windows-app/microsoft-asp.net-core-hosting-bundle-10.0"
  },
  "cves": [
    {
      "cveId": "CVE-2026-70035",
      "url": "https://patchblox.com/security/cve/CVE-2026-70035",
      "title": ".NET Framework Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-83520",
      "url": "https://patchblox.com/security/cve/CVE-2026-83520",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-58280",
      "url": "https://patchblox.com/security/cve/CVE-2026-58280",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.0125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-69651",
      "url": "https://patchblox.com/security/cve/CVE-2026-69651",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.0125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96958",
      "url": "https://patchblox.com/security/cve/CVE-2026-96958",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96960",
      "url": "https://patchblox.com/security/cve/CVE-2026-96960",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96233",
      "url": "https://patchblox.com/security/cve/CVE-2026-96233",
      "title": "ASP.NET Core Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00991,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96959",
      "url": "https://patchblox.com/security/cve/CVE-2026-96959",
      "title": ".NET Denial of Service Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00969,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-70174",
      "url": "https://patchblox.com/security/cve/CVE-2026-70174",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00913,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96232",
      "url": "https://patchblox.com/security/cve/CVE-2026-96232",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00895,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-85363",
      "url": "https://patchblox.com/security/cve/CVE-2026-85363",
      "title": ".NET Framework Elevation of Privilege Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00859,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96235",
      "url": "https://patchblox.com/security/cve/CVE-2026-96235",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00859,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-87697",
      "url": "https://patchblox.com/security/cve/CVE-2026-87697",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00843,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-70007",
      "url": "https://patchblox.com/security/cve/CVE-2026-70007",
      "title": ".NET Framework Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00801,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-70197",
      "url": "https://patchblox.com/security/cve/CVE-2026-70197",
      "title": ".NET and Visual Studio Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-66822",
      "url": "https://patchblox.com/security/cve/CVE-2026-66822",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00785,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96224",
      "url": "https://patchblox.com/security/cve/CVE-2026-96224",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00759,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96957",
      "url": "https://patchblox.com/security/cve/CVE-2026-96957",
      "title": ".NET Security Feature Bypass Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00534,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96225",
      "url": "https://patchblox.com/security/cve/CVE-2026-96225",
      "title": ".NET Elevation of Privilege Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96231",
      "url": "https://patchblox.com/security/cve/CVE-2026-96231",
      "title": ".NET Elevation of Privilege Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96229",
      "url": "https://patchblox.com/security/cve/CVE-2026-96229",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.00949,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96234",
      "url": "https://patchblox.com/security/cve/CVE-2026-96234",
      "title": ".NET Information Disclosure Vulnerability",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}