CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

HIGH

7.5

CVSS Score

Published: September 13, 2022 at 12:00 AM UTC

Updated: June 17, 2026 at 04:55 AM UTC

5 products affected across 2 vendorsFedoraVisual Studio 2022.net

Get instant alerts when new vulnerabilities affect Visual Studio 2022 for Mac version 17.3 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Severity

HIGH7.5

Exploit prediction

EPSS 4%

SSVC

No known exploit

Description

.NET Core and Visual Studio Denial of Service Vulnerability

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

95%

95%

6.0.0 ≤ v < 6.0.96.0.0

Affected range stops below 6.0.9, so it looks safe — our inference, not a vendor statement

95%

3.1 ≤ v < 3.1.293.1

Affected range stops below 3.1.29, so it looks safe — our inference, not a vendor statement

95%

15.0.0 ≤ v < 16.9.2516.11.0 ≤ v < 16.11.1915.0.0 16.11 16.11.0 16.9

Affected range stops below 16.11.19, so it looks safe — our inference, not a vendor statement

Affected range stops below 16.9.25, so it looks safe — our inference, not a vendor statement

95%

17.0.0 ≤ v < 17.0.1417.0.0 ≤ v < 17.3.417.2.0 ≤ v < 17.2.817.3 ≤ v < 17.3.517.0 17.0.0 17.2 17.2.0 17.3

Affected range stops below 17.0.14, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.2.8, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.3.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.3.5, so it looks safe — our inference, not a vendor statement

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references