Class familyMicrosoft · .NET Core and Visual Studio
Microsoft .NET resource exhaustion flaws, 2022–2026
13 .NET Core and Visual Studio CVEs with CWE-400 weaknesses, 9 Mar 2022 to 14 Apr 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2022’22
5 2023’23
4 2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
20223 CVEs
20235 CVEs, 1 in KEV
20244 CVEs
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-24464 | 9 Mar 2022 | .NET and Visual Studio Denial of Service Vulnerability · fixed in 6.0.3 | Grouped by weakness | 23.1 |
| CVE-2022-29117 | 10 May 2022 | .NET and Visual Studio Denial of Service Vulnerability · fixed in 6.0.5 | Grouped by weakness | 28.9 |
| CVE-2022-29145 | 10 May 2022 | .NET and Visual Studio Denial of Service Vulnerability · fixed in 6.0.5 | Grouped by weakness | 23.8 |
| CVE-2023-29331 | 14 Jun 2023 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability · fixed in 7.0.7 | Grouped by weakness | 22.3 |
| CVE-2023-38178 | 8 Aug 2023 | .NET Core and Visual Studio Denial of Service Vulnerability · fixed in 7.0.10 | Grouped by weakness | 22.3 |
| CVE-2023-38180KEV | 8 Aug 2023 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability · fixed in 7.0.10 | Grouped by weakness | 62.6 |
| CVE-2023-36799 | 12 Sep 2023 | .NET Core and Visual Studio Denial of Service Vulnerability · fixed in 7.0.11 | Grouped by weakness | 22.9 |
| CVE-2023-36038 | 14 Nov 2023 | ASP.NET Core Denial of Service Vulnerability | Grouped by weakness | 23.0 |
| CVE-2024-20672 | 9 Jan 2024 | .NET Denial of Service Vulnerability | Grouped by weakness | 22.6 |
| CVE-2024-21386 | 13 Feb 2024 | .NET Denial of Service Vulnerability · fixed in 8.0.2 | Grouped by weakness | 22.1 |
| CVE-2024-30105 | 9 Jul 2024 | .NET and Visual Studio Denial of Service Vulnerability · fixed in 8.0.4 | Grouped by weakness | 22.7 |
| CVE-2024-38168 | 13 Aug 2024 | .NET and Visual Studio Denial of Service Vulnerability · fixed in 8.0.8 | Grouped by weakness | 22.4 |
| CVE-2026-33116 | 14 Apr 2026 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | Grouped by weakness | 21.7 |