CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

high 7.5 CVSS 3.1
Published: Sep 13, 2022
Modified: May 27, 2026
Vendor: Microsoft
Product: .Net
Versions: 6.0.0,3.1,16.9,16.11,17.0,17.2,17.3,35,36,37

Description

.NET Core and Visual Studio Denial of Service Vulnerability

References

Related CVEs

CVE-2026-49940 medium · 6.5
Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parse
CVE-2026-49941 high · 7.5
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmas
CVE-2026-49942 high · 7.3
Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661)
CVE-2026-46739 medium · 5.3
Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could i
CVE-2026-8722 medium · 6.5
Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untruste
CVE-2026-45584 high · 8.1
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.