CVE-2023-36042: Visual Studio Denial of Service Vulnerability
Published Nov 14, 2023
·Updated
Visual Studio Denial of Service Vulnerability
Affected Software
15 affected componentsFixes available
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8.1
Microsoft Visual Studio 2019>=16.0<16.11.32
Microsoft Visual Studio 2022>=17.2<17.2.22
Microsoft Visual Studio 2022>=17.4<17.4.14
Microsoft Visual Studio 2022>=17.6<17.6.10
Microsoft Visual Studio 2022>=17.7<17.7.7
Microsoft Visual Studio 2022=17.4
Microsoft Visual Studio 2022=17.2
Microsoft Visual Studio 2022=17.7
Remediation
Event History
Nov 14, 2023
CVE Published
08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:57 PM
Data Sourced
via MITRE·05:57 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-36042?
The severity of CVE-2023-36042 is high.
2
How does CVE-2023-36042 affect Visual Studio 2022?
CVE-2023-36042 affects Visual Studio 2022 versions 17.6, 17.2, and 17.7.
3
What is the remedy for CVE-2023-36042 on Visual Studio 2022?
The remedy for CVE-2023-36042 on Visual Studio 2022 is to install the corresponding patches. Links to the patches can be found in the Microsoft documentation.
4
Which versions of Visual Studio 2019 are affected by CVE-2023-36042?
CVE-2023-36042 affects Visual Studio 2019 versions 16.11 and includes versions 16.0 to 16.10.
5
Where can I find more information about CVE-2023-36042?
You can find more information about CVE-2023-36042 in the Microsoft Security Response Center.