CVE-2023-38178

Summary: CVE-2023-38178 is a remote Denial of Service vulnerability in .NET Core/Visual Studio (notably affecting .NET 7.0 up to 7.0.9 and .NET 6 with HTTP/3 support). Connected advisories provide concrete mitigations and patched versions: for .NET 7.0, upgrade to 7.0.10 (and corresponding Runtim...

CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2023-38178 .NET Core and Visual Studio Denial of Service Vulnerability

...

CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-35390

CVE-2023-35390 affects Microsoft .NET Core and Visual Studio runtimes used by IBM Robotic Process Automation for Cloud Pak. The IBM security bulletin confirms remote code execution via a user‑vectored payload: persuading a victim to open a specially crafted file could allow arbitrary code executi...

CVE-2023-36897 Visual Studio Tools for Office Runtime Spoofing Vulnerability

...

CVE-2023-36897

CVE-2023-36897 is a spoofing vulnerability in the Visual Studio Tools for Office (VSTO) Runtime. It can allow impersonation of another user and is tied to Office/VSTO deployments. Evidence from multiple sources (MSRC/KB5029497, Nessus plugin, NCSC advisory) indicates the issue affects VSTO runtim...

CVE-2023-36897 Visual Studio Tools for Office Runtime Spoofing Vulnerability

...

.NET and Visual Studio Remote Code Execution Vulnerability

...

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

...

Visual Studio Tools for Office Runtime Spoofing Vulnerability

...

Description of the Security Update for the spoofing vulnerability in Microsoft Visual Studio 2010 Tools for Office Runtime: August 8, 2023 (KB5029497)

Description of the Security Update for the spoofing vulnerability in Microsoft Visual Studio 2010 Tools for Office Runtime: August 8, 2023 KB5029497 Applies to: Visual Studio 2010 Tools for Office Runtime that is included with Microsoft Office and Visual Studio 2022, 2019, 2017, 2015, and 2013...

Microsoft .NET and Visual Studio Security Vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

Microsoft ASP.NET Core and Visual Studio Security Vulnerabilities

Microsoft Visual Studio and Microsoft ASP.NET Core are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft ASP.NET...

CVE-2023-35391: Undefined Security Weakness

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

CVE-2023-38178: Uncontrolled Resource Consumption

.NET Core and Visual Studio Denial of Service Vulnerability...

Microsoft .NET Core and Visual Studio Security Vulnerabilities

Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...