{
  "product": "Microsoft ASP.NET Core Hosting Bundle 10.0",
  "url": "https://patchblox.com/security/product/windows-app/microsoft-asp.net-core-hosting-bundle-10.0",
  "summary": "The latest version of Microsoft ASP.NET Core Hosting Bundle 10.0 is 10.0.15, released October 29, 2026. Patch Radar has 3 security fixes for Microsoft ASP.NET Core Hosting Bundle 10.0, closing 27 CVEs. The newest security fix is Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.14, released October 23, 2026. Version 10.0.15 adds no new CVE fixes and includes all of them. 5 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "Microsoft",
  "supported": true,
  "latestVersion": "10.0.15",
  "latestReleased": "2026-10-29T00:00:00Z",
  "latestIncludesAllFixes": true,
  "fixCount": 3,
  "cveCount": 27,
  "exploitedCveCount": 0,
  "unfixedCveCount": 5,
  "fixes": [
    {
      "fix": "Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.14",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.dotnet.hostingbundle.10-10.0.14",
      "released": "2026-10-23T00:00:00Z",
      "fixedVersion": "10.0.14",
      "priority": "Urgent",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.13",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.dotnet.hostingbundle.10-10.0.13",
      "released": "2026-10-05T00:00:00Z",
      "fixedVersion": "10.0.13",
      "priority": "High",
      "cveCount": 22,
      "exploitedCveCount": 0
    },
    {
      "fix": "Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.12",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.dotnet.hostingbundle.10-10.0.12",
      "released": "2026-08-22T00:00:00Z",
      "fixedVersion": "10.0.12",
      "priority": "High",
      "cveCount": 4,
      "exploitedCveCount": 0
    }
  ],
  "noFixYet": [
    {
      "cveId": "CVE-2026-70161",
      "url": "https://patchblox.com/security/cve/CVE-2026-70161",
      "title": ".NET Elevation of Privilege Vulnerability",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "10.0.15"
    },
    {
      "cveId": "CVE-2026-70190",
      "url": "https://patchblox.com/security/cve/CVE-2026-70190",
      "title": ".NET Elevation of Privilege Vulnerability",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "10.0.15"
    },
    {
      "cveId": "CVE-2026-96237",
      "url": "https://patchblox.com/security/cve/CVE-2026-96237",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "10.0.15"
    },
    {
      "cveId": "CVE-2026-96238",
      "url": "https://patchblox.com/security/cve/CVE-2026-96238",
      "title": ".NET Security Feature Bypass Vulnerability",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "10.0.15"
    },
    {
      "cveId": "CVE-2026-70165",
      "url": "https://patchblox.com/security/cve/CVE-2026-70165",
      "title": ".NET Elevation of Privilege Vulnerability",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "10.0.15"
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}