CVE-2023-38178

HighCVSS 7.5/10Last modified Nov 10, 2026

Description

.NET Core and Visual Studio Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
Microsoft.NET 6.0>= 6.0.0, < 6.0.21
MicrosoftMicrosoft Visual Studio 2022 version 17.2>= 17.2.0, < 17.2.18
MicrosoftMicrosoft Visual Studio 2022 version 17.4>= 17.4.0, < 17.4.10

References

Timeline

Published
Aug 8, 2023
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-381807.5.NET and Visual Studio Denial of Service VulnerabilityCVE-2023-381818.8Microsoft Exchange Server Spoofing VulnerabilityCVE-2023-381828.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-381847.5Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2023-381858.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-381869.8Windows Mobile Device Management Elevation of Privilege VulnerabilityCVE-2023-381876.5Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-381884.5Azure Apache Hadoop Spoofing VulnerabilityCVE-2023-38196.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.CVE-2023-381908.8An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter.CVE-2023-381916.1An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename.CVE-2023-381926.1An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwords.
CVE-2023-38178: High severity, CVSS 7.5 | Vulnix