8.2
High
CVE-2023-36038 ASP.NET Core Denial of Service Vulnerability
Description
ASP.NET Core Denial of Service Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASP.NET Core 8.0 8.0 | 8.0 → < 8.0.0 | 8.0.0 |
| Microsoft Visual Studio 2022 version 17.2 17.2 | 17.2.0 → < 17.2.22 | 17.2.22 |
| Microsoft Visual Studio 2022 version 17.4 17.4 | 17.4.0 → < 17.4.14 | 17.4.14 |
| Microsoft Visual Studio 2022 version 17.6 17.6 | 17.6.0 → < 17.6.10 | 17.6.10 |
| Microsoft Visual Studio 2022 version 17.7 17.7 | 17.7.0 → < 17.7.7 | 17.7.7 |
| .NET 8.0 8.0 | 8.0 → < 8.0.0 | 8.0.0 |
References
- ASP.NET Core Denial of Service Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of ASP.NET Core 8.0
The 17 CVEs of ASP.NET Core 8.0 →
CVE-2026-88092
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an…
9.4
Critical
CVE-2026-96236
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…
7.5
High
CVE-2026-70175
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network
8.1
High
CVE-2026-70188
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an…
9.1
Critical