Microsoft.NETCore.App.Runtime.win-arm64 vulnerabilities
CVEs whose affected-version data names the Microsoft.NETCore.App.Runtime.win-arm64 package (nuget, rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-96233High· 7.5Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
▾ TwilightMicrosoft · Microsoft.NETCore.App.Runtime.linux-armEPSS 0.99%via NVD
CVE-2026-66822Medium· 5.9Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Microsoft.NETCore.App.Runtime.linux-armEPSS 0.78%via NVD
CVE-2020-36846Medium· 6.5Integer overflow in the bundled Brotli C library
Integer overflow in the bundled Brotli C library
▾ Sunlitcompu-brotli-sys · compu-brotli-sysEPSS 0.66%via OSV