CVE-2023-36038

CVE-2023-36038

• CWE-400 — CWE-400: Uncontrolled Resource Consumption

• Microsoft / ASP.NET Core 8.0 — v=8.0 <8.0.0 [affected]
• Microsoft / Microsoft Visual Studio 2022 version 17.2 — v=17.2.0 <17.2.22 [affected]
• Microsoft / Microsoft Visual Studio 2022 version 17.4 — v=17.4.0 <17.4.14 [affected]
• Microsoft / Microsoft Visual Studio 2022 version 17.6 — v=17.6.0 <17.6.10 [affected]
• Microsoft / Microsoft Visual Studio 2022 version 17.7 — v=17.7.0 <17.7.7 [affected]
• Microsoft / .NET 8.0 — v=8.0 <8.0.0 [affected]

• 3.1 score=8.2 severity=HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36038 vendor-advisory