{
  "product": "Microsoft ASP.NET Core Hosting Bundle 9.0",
  "url": "https://patchblox.com/security/product/windows-app/microsoft-asp.net-core-hosting-bundle-9.0",
  "summary": "The latest version of Microsoft ASP.NET Core Hosting Bundle 9.0 is 9.0.23, released October 23, 2026. Patch Radar has 2 security fixes for Microsoft ASP.NET Core Hosting Bundle 9.0, closing 26 CVEs. The newest security fix is Microsoft ASP.NET Core Hosting Bundle 9.0 9.0.21, released October 5, 2026. Version 9.0.23 adds no new CVE fixes and includes all of them. 2 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "Microsoft",
  "supported": true,
  "latestVersion": "9.0.23",
  "latestReleased": "2026-10-23T00:00:00Z",
  "latestIncludesAllFixes": true,
  "fixCount": 2,
  "cveCount": 26,
  "exploitedCveCount": 0,
  "unfixedCveCount": 2,
  "fixes": [
    {
      "fix": "Microsoft ASP.NET Core Hosting Bundle 9.0 9.0.21",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.dotnet.hostingbundle.9-9.0.21",
      "released": "2026-10-05T00:00:00Z",
      "fixedVersion": "9.0.21",
      "priority": "Urgent",
      "cveCount": 22,
      "exploitedCveCount": 0
    },
    {
      "fix": "Microsoft ASP.NET Core Hosting Bundle 9.0 9.0.20",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.dotnet.hostingbundle.9-9.0.20",
      "released": "2026-08-14T00:00:00Z",
      "fixedVersion": "9.0.20",
      "priority": "High",
      "cveCount": 4,
      "exploitedCveCount": 0
    }
  ],
  "noFixYet": [
    {
      "cveId": "CVE-2026-96237",
      "url": "https://patchblox.com/security/cve/CVE-2026-96237",
      "title": ".NET Remote Code Execution Vulnerability",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "9.0.23"
    },
    {
      "cveId": "CVE-2026-96238",
      "url": "https://patchblox.com/security/cve/CVE-2026-96238",
      "title": ".NET Security Feature Bypass Vulnerability",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "9.0.23"
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}