CVE-2023-36042

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Visual Studio Denial of Service Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-122CWE-400

Affected software

VendorProductVersions
MicrosoftMicrosoft Visual Studio 2022 version 17.6>= 17.6.0, < 17.6.10
MicrosoftMicrosoft Visual Studio 2022 version 17.7>= 17.7.0, < 17.7.7
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8.1>= 4.8.1, < 4.8.09214.01

References

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-360436.5Open Management Infrastructure Information Disclosure VulnerabilityCVE-2023-360457.8Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2023-360467.1Windows Authentication Denial of Service VulnerabilityCVE-2023-360477.8Windows Authentication Elevation of Privilege VulnerabilityCVE-2023-360499.8.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-36059.1A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an uCVE-2023-360508.0Microsoft Exchange Server Spoofing VulnerabilityCVE-2023-360528.6Azure CLI REST Command Information Disclosure VulnerabilityCVE-2023-360537.5In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regulaCVE-2023-360546.5lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenCVE-2023-36068.8A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part of the file /api/pingCVE-2023-36078.0A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webc
CVE-2023-36042: Medium severity, CVSS 5.5 | Vulnix