What is CVE-2024-38168?

CVE-2024-38168 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. .NET and Visual Studio Denial of Service Vulnerability

Which CVE IDs does CVE-2024-38168 cover?

CVE-2024-38168 covers the following CVE IDs: CVE-2024-38168. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2024-38168?

CVE-2024-38168 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2024-38168?

CVE-2024-38168 affects 4 products, including: .NET 8.0; Microsoft Visual Studio 2022 version 17.10; Microsoft Visual Studio 2022 version 17.6; Microsoft Visual Studio 2022 version 17.8.

CVE-2024-38168HighCVSS 7.5

.NET and Visual Studio Denial of Service Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

August 13, 2024

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2024-38168 →

🎯 Affected products4

.NET 8.0
Microsoft Visual Studio 2022 version 17.10
Microsoft Visual Studio 2022 version 17.6
Microsoft Visual Studio 2022 version 17.8

✅ Remediation

KB5042132 (Security Update) — fixed build 8.0.8 KBRelease Notes (Security Update) — fixed build 17.6.18 KBRelease Notes (Security Update) — fixed build 17.10.6 KBRelease Notes (Security Update) — fixed build 17.8.13

🔗 References (7)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38168
patchhttps://dotnet.microsoft.com/en-us/download/dotnet/8.0
referencehttps://support.microsoft.com/help/5042132
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6
referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.10
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8