CVE-2023-36038: Microsoft ASP.NET Core

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

ASP.NET Core Denial of Service Vulnerability

Affected products

• Microsoft ASP.NET Core: version 8.0.0 only
• Microsoft Visual Studio 2022: from 17.2, before 17.2.22 (fixed in 17.2.22); from 17.4, before 17.4.14 (fixed in 17.4.14); from 17.6, before 17.6.10 (fixed in 17.6.10); from 17.7, before 17.7.7 (fixed in 17.7.7)

Published 2023-11-14. Last modified 2026-06-17.