返回 CVE 瀏覽器

CVE-2023-38180

🔥 Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-08-08

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

.NET and Visual Studio Denial of Service Vulnerability

Affected Platforms (CPE)

📦

Microsoft

.net

>= 6.0.0 and < 6.0.21>= 7.0.0 and < 7.0.10

📦

Microsoft

Asp.net Core

>= 2.1 and < 2.1.40

📦

Microsoft

Visual Studio 2022

>= 17.2.0 and < 17.2.18>= 17.4.0 and < 17.4.10>= 17.6.0 and < 17.6.6

💻

Fedoraproject

Fedora

= 37= 38

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38180

相關資安分析文章

週度網絡安全新聞：2026 年 7 月 27 日

本週重大安全週報聚焦於 Check Point SmartConsole CVE-2026-16232 驗證繞過之在野利用、PAN-OS GlobalProtect 漏洞與 Qilin 勒索軟體侵襲、俄羅斯 LAUNDRY BEAR 對 Zimbra 進行之國家級郵件間諜活動，以及 Windchill 與 FakeGit 惡意 Repositories 威脅趨勢。

全球網絡威脅情報摘要：2026 年 7 月 24 日

本期情報聚焦於 Check Point CVE-2026-16232 SmartConsole 控制平面身分驗證繞過之主動利用、俄羅斯 LAUNDRY BEAR 利用 Zimbra 漏洞進行電子郵件間諜活動，以及假冒 Claude Desktop 的惡意廣告攻擊與 Chaos 勒索軟體運作動態。

全球網絡威脅情報摘要：2026 年 7 月 23 日

本期情報重點包含 CISA 將 Langflow CVE-2026-0770 遠端程式碼執行漏洞列入 KEV 已知利用目錄、Windmill CVE-2026-29059 未經身分驗證路徑穿越漏洞分析，以及 SonicWall SMA1000 零日漏洞利用持續追蹤與防禦建議。

相關漏洞威脅

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open ...

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as li...

In the Linux kernel, the following vulnerability has been resolved: xfrm: move policy_bydst RCU sync from per-netns .exit to .pre...

CVE-2026-644527.1

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpan_n...