CVE-2023-36558: Microsoft .net

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

ASP.NET Core Security Feature Bypass Vulnerability

Affected products

• Microsoft .net: from 6.0.0, before 6.0.25 (fixed in 6.0.25); from 7.0.0, before 7.0.14 (fixed in 7.0.14); version 8.0.0 only
• Microsoft ASP.NET Core: from 6.0.0, before 6.0.25 (fixed in 6.0.25); from 7.0.0, before 7.0.14 (fixed in 7.0.14); version 8.0.0 only
• Microsoft Visual Studio 2022: from 17.2, before 17.2.22 (fixed in 17.2.22); from 17.4, before 17.4.14 (fixed in 17.4.14); from 17.6, before 17.6.10 (fixed in 17.6.10); from 17.7, before 17.7.7 (fixed in 17.7.7)

Published 2023-11-14. Last modified 2026-06-17.