High severity8.8NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2018-0784

Description

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0808.

Affected products

Microsoft/Aspnetcorellm-fuzzy
Range: 1.0, 1.1, 2.0
Microsoft Corporation/ASP.NET Corev5
Range: ASP.NET Core 1.0. 1.1, and 2.0

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0784nvdPatchVendor Advisory
www.securityfocus.com/bid/102377nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040151nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000