CVE-2023-38180

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

.NET and Visual Studio Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Aug 8, 2023
Last modified
Aug 10, 2026
Added to CISA KEV
Aug 9, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-381818.8Microsoft Exchange Server Spoofing VulnerabilityCVE-2023-381828.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-381847.5Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2023-381858.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-381869.8Windows Mobile Device Management Elevation of Privilege VulnerabilityCVE-2023-381876.5Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-381884.5Azure Apache Hadoop Spoofing VulnerabilityCVE-2023-38196.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.CVE-2023-381908.8An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter.CVE-2023-381916.1An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename.CVE-2023-381926.1An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwords.CVE-2023-381938.8An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command line.
CVE-2023-38180: High severity, CVSS 7.5 | Vulnix