Summary
Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
Security updates
17.6.10 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
4.8.09214.01 — https://support.microsoft.com/help/5034272
4.8.09214.01 — https://support.microsoft.com/help/5034276
4.8.09214.01 — https://support.microsoft.com/help/5034274
4.8.09214.01 — https://support.microsoft.com/help/5033920
4.8.09214.01 — https://support.microsoft.com/help/5034275
4.8.09214.01 — https://support.microsoft.com/help/5033917
Vulnerabilities 1
-
Medium 6.2
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability
Revision history
-
#2
In the Security Updates table, added .NET Framework 3.5 and 4.8.1 installed on all supported versions of the following: Windows 10 version 21H2, Windows 10 version 22H2, Windows Server 2022, Windows 11 version 21H2, Windows 11 version 22H2, Windows 11 version 23H2, and Windows Server Windows Server 2022, 23H2 Edition (Server Core installation) as .NET Framework 4.8.1 is affected by this vulnerability. Microsoft recommends that customers install the January 2024 updates to be fully protected from this vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.
-
#1
Information published.
References
-
CVE-2023-36042 Visual Studio Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36042
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss