Known vulnerabilities in dotnet-hostfxr-11.0 (Ubuntu package)

Vendor: Canonical Ltd.
Software: dotnet-hostfxr-11.0 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:dotnet-hostfxr-11_0_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 28
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dotnet-hostfxr-11.0 (Ubuntu package) dotnet-hostfxr-11.0 (Ubuntu package) is affected by 28 known vulnerabilities: 4 high, 20 medium, 4 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155544 - Asymmetric Resource Consumption (Amplification)
CVE-2026-96960		 CWE-405 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 6 more
#VU155543 - Allocation of Resources Without Limits or Throttling
CVE-2026-96959		 CWE-770 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 6 more
#VU155542 - Inefficient Algorithmic Complexity
CVE-2026-96958		 CWE-407 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 6 more
#VU155541 - Improper Verification of Cryptographic Signature
CVE-2026-96957		 CWE-347 High
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 2 more
#VU155438 - Origin Validation Error
CVE-2026-96238		 CWE-346 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155437 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-96237		 CWE-829 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155436 - Allocation of Resources Without Limits or Throttling
CVE-2026-96236		 CWE-770 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155433 - Out-of-bounds write
CVE-2026-96233		 CWE-787 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155431 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-96231		 CWE-59 Low
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155430 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-96230		 CWE-79 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155428 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-96225		 CWE-59 Low
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155425 - Improper Certificate Validation
CVE-2026-96222		 CWE-295 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB2026101684
SB2026101685
and 5 more
#VU155402 - Improperly Controlled Sequential Memory Allocation
CVE-2026-92707		 CWE-1325 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155297 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-88092		 CWE-444 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155081 - Inefficient Algorithmic Complexity
CVE-2026-84008		 CWE-407 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 6 more
#VU154633 - Inefficient Algorithmic Complexity
CVE-2026-70196		 CWE-407 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154631 - Improper Certificate Validation
CVE-2026-70194		 CWE-295 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101402
SB2026103080
#VU154629 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-70188		 CWE-444 High
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154627 - Deadlock
CVE-2026-70186		 CWE-833 Medium
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154624 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-70183		 CWE-362 Low
No
No
 11.0.0~rc2-0ubuntu1~26.10.1 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more


Showing elements 1 - 20 out of 28