CVE-2023-36038

—

CVSS 3.1

7.5 high

EPSS

3%p86

Published

Nov 14, 2023 (Nov 14, 2023)

Modified

Jun 17, 2026

Description

ASP.NET Core Denial of Service Vulnerability

Vendors: microsoft
Products: visual studio 2022, asp.net core
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news3 stories

Microsoft Fixes Five Zero

Infosecurity MagazineNov 15, 10:00 UTC · Nov 15, 2023Exploit / PoC in the wildCVE-2023-36036 CVE-2023-36033 CVE-2023-36025+2 CVEs

60

Microsoft Patch Tuesday, November 2023 Edition

Krebs on SecurityNov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36025 CVE-2023-36033 CVE-2023-36036+6 CVEs1

60

Alert: Microsoft Releases Patch Updates for 5 New Zero

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36025 CVE-2023-36033 CVE-2023-36036+9 CVEs

60