{"history":[{"alert":0,"cve":"CVE-2023-38180","id":22518,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.14127, \"percentile\": 0.96624}"},{"alert":0,"cve":"CVE-2023-38180","id":20137,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.14127, \"percentile\": 0.96603}"},{"alert":0,"cve":"CVE-2023-38180","id":18103,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.14127, \"percentile\": 0.96599}"},{"alert":0,"cve":"CVE-2023-38180","id":16167,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.14127, \"percentile\": 0.96597}"},{"alert":0,"cve":"CVE-2023-38180","id":14145,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.14127, \"percentile\": 0.96595}"},{"alert":0,"cve":"CVE-2023-38180","id":11927,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.14127, \"percentile\": 0.9659}"},{"alert":0,"cve":"CVE-2023-38180","id":9913,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.14127, \"percentile\": 0.96588}"},{"alert":0,"cve":"CVE-2023-38180","id":7461,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.14127, \"percentile\": 0.96585}"},{"alert":1,"cve":"CVE-2023-38180","id":6238,"kind":"cna","observed_at":1793809200,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2023-38180\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-07-24T20:42:20.831219Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2023-08-09\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38180\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-400\", \"description\": \"CWE-400 Uncontrolled Resource Consumption\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:41.434Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38180\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2023-08-09T00:00:00.000Z\", \"value\": \"CVE-2023-38180 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T17:30:14.113Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \".NET and Visual Studio Denial of Service Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_transferred\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"product\": \".NET 6.0\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.0.21\", \"status\": \"affected\", \"version\": \"6.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \".NET 7.0\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"7.0.10\", \"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"ASP.NET Core 2.1\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"2.1.40\", \"status\": \"affected\", \"version\": \"2.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Microsoft Visual Studio 2022 version 17.2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"17.2.18\", \"status\": \"affected\", \"version\": \"17.2.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Microsoft Visual Studio 2022 version 17.4\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"17.4.10\", \"status\": \"affected\", \"version\": \"17.4.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Microsoft Visual Studio 2022 version 17.6\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"17.6.6\", \"status\": \"affected\", \"version\": \"17.6.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.1.40\", \"versionStartIncluding\": \"2.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.0.21\", \"versionStartIncluding\": \"6.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.0.10\", \"versionStartIncluding\": \"7.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.2.18\", \"versionStartIncluding\": \"17.2.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.4.10\", \"versionStartIncluding\": \"17.4.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.6.6\", \"versionStartIncluding\": \"17.6.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2023-08-08T07:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \".NET and Visual Studio Denial of Service Vulnerability\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Denial of Service\", \"lang\": \"en-US\", \"type\": \"Impact\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-10T15:12:01.076Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \".NET and Visual Studio Denial of Service Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180\"}], \"title\": \".NET and Visual Studio Denial of Service Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2023-38180\", \"datePublished\": \"2023-08-08T18:52:31.790Z\", \"dateReserved\": \"2023-07-12T23:41:45.867Z\", \"dateUpdated\": \"2026-08-10T15:12:01.076Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2023-38180","id":5238,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.14127, \"percentile\": 0.96579}"},{"alert":0,"cve":"CVE-2023-38180","id":3020,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.14127, \"percentile\": 0.96574}"},{"alert":1,"cve":"CVE-2023-38180","id":786,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-38180\", \"cwes\": [], \"dateAdded\": \"2023-08-09\", \"dueDate\": \"2023-08-30\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-38180;  https://nvd.nist.gov/vuln/detail/CVE-2023-38180\", \"product\": \".NET Core and Visual Studio\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability\"}"}],"record":{"affected":[{"product":".NET 6.0","vendor":"Microsoft","versions":[{"lessThan":"6.0.21","status":"affected","version":"6.0.0","versionType":"custom"}]},{"product":".NET 7.0","vendor":"Microsoft","versions":[{"lessThan":"7.0.10","status":"affected","version":"7.0.0","versionType":"custom"}]},{"product":"ASP.NET Core 2.1","vendor":"Microsoft","versions":[{"lessThan":"2.1.40","status":"affected","version":"2.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.2","vendor":"Microsoft","versions":[{"lessThan":"17.2.18","status":"affected","version":"17.2.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.4","vendor":"Microsoft","versions":[{"lessThan":"17.4.10","status":"affected","version":"17.4.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.6","vendor":"Microsoft","versions":[{"lessThan":"17.6.6","status":"affected","version":"17.6.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2023-38180","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-07-24T20:42:20.831219Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2023-08-09","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38180"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:41.434Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38180"}],"timeline":[{"lang":"en","time":"2023-08-09T00:00:00.000Z","value":"CVE-2023-38180 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2024-08-02T17:30:14.113Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":".NET and Visual Studio Denial of Service Vulnerability","tags":["vendor-advisory","x_transferred"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180"},{"tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/"},{"tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":".NET 6.0","vendor":"Microsoft","versions":[{"lessThan":"6.0.21","status":"affected","version":"6.0.0","versionType":"custom"}]},{"product":".NET 7.0","vendor":"Microsoft","versions":[{"lessThan":"7.0.10","status":"affected","version":"7.0.0","versionType":"custom"}]},{"product":"ASP.NET Core 2.1","vendor":"Microsoft","versions":[{"lessThan":"2.1.40","status":"affected","version":"2.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.2","vendor":"Microsoft","versions":[{"lessThan":"17.2.18","status":"affected","version":"17.2.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.4","vendor":"Microsoft","versions":[{"lessThan":"17.4.10","status":"affected","version":"17.4.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.6","vendor":"Microsoft","versions":[{"lessThan":"17.6.6","status":"affected","version":"17.6.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*","versionEndExcluding":"2.1.40","versionStartIncluding":"2.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.21","versionStartIncluding":"6.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.10","versionStartIncluding":"7.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"17.2.18","versionStartIncluding":"17.2.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"17.4.10","versionStartIncluding":"17.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"17.6.6","versionStartIncluding":"17.6.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2023-08-08T07:00:00.000Z","descriptions":[{"lang":"en-US","value":".NET and Visual Studio Denial of Service Vulnerability"}],"metrics":[{"cvssV3_1":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"Denial of Service","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"dateUpdated":"2026-08-10T15:12:01.076Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":".NET and Visual Studio Denial of Service Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180"}],"title":".NET and Visual Studio Denial of Service Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2023-38180","datePublished":"2023-08-08T18:52:31.790Z","dateReserved":"2023-07-12T23:41:45.867Z","dateUpdated":"2026-08-10T15:12:01.076Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794241201,"cve":"CVE-2023-38180","description":".NET and Visual Studio Denial of Service Vulnerability","epss":{"date":"2026-11-12","epss":0.14127,"percentile":0.96624},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-38180","cwes":[],"dateAdded":"2023-08-09","dueDate":"2023-08-30","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-38180;  https://nvd.nist.gov/vuln/detail/CVE-2023-38180","product":".NET Core and Visual Studio","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).","vendorProject":"Microsoft","vulnerabilityName":"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability"},"kev_checked":1794522003,"products":"Microsoft .NET 6.0, Microsoft .NET 7.0, Microsoft ASP.NET Core 2.1, Microsoft Microsoft Visual Studio 2022 version 17.2, Microsoft Microsoft Visual Studio 2022 version 17.4, Microsoft Microsoft Visual Studio 2022 version 17.6","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38180","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/"],"score":{"baseScore":7.5,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":".NET and Visual Studio Denial of Service Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}