High · 8.2 Publicly disclosed CVE-2023-36038 EUVD-2023-40022

ASP.NET Core Denial of Service Vulnerability

Published Nov 14, 2023 · Updated Oct 9, 2025 · Assigned by microsoft

Vendor: Microsoft Product: .NET 8.0 Product: ASP.NET Core 8.0 Product: Microsoft Visual Studio 2022 version 17.2 Product: Microsoft Visual Studio 2022 version 17.4 Product: Microsoft Visual Studio 2022 version 17.6 Product: Microsoft Visual Studio 2022 version 17.7

Description

ASP.NET Core Denial of Service Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	ASP.NET Core 8.0	8.0 – < 8.0.0	8.0.0
Microsoft	Microsoft Visual Studio 2022 version 17.2	17.2.0 – < 17.2.22	17.2.22
Microsoft	Microsoft Visual Studio 2022 version 17.4	17.4.0 – < 17.4.14	17.4.14
Microsoft	Microsoft Visual Studio 2022 version 17.6	17.6.0 – < 17.6.10	17.6.10
Microsoft	Microsoft Visual Studio 2022 version 17.7	17.7.0 – < 17.7.7	17.7.7
Microsoft	.NET 8.0	8.0 – < 8.0.0	8.0.0

Advisories 5

MSRC-CVE-2023-36038 ASP.NET Core Denial of Service Vulnerability Microsoft Security Response Center · Oct 8, 2025
NCSC-2024-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jun 11, 2024
ICSA-24-165-04 Siemens ST7 ScadaConnect CISA ICS & IT advisories · Jun 11, 2024
SSA-341067 SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 Siemens ProductCERT · Jun 11, 2024
WID-SEC-2023-2895 Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 28, 2023

References

ASP.NET Core Denial of Service Vulnerability vendor-advisory