Skip to main content

Fedora CVE-2023-21538

HIGH
Deserialization of Untrusted Data (CWE-502)
2023-01-10 secure@microsoft.com
7.5
CVSS 3.1 · Vendor: microsoft
Share

Severity by source

Vendor (microsoft) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Jan 10, 2023 - 22:15 cve.org
HIGH 7.5

DescriptionCVE.org

.NET Denial of Service Vulnerability

AnalysisAI

.NET Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Deserialization of Untrusted Data (CWE-502), which allows attackers to execute arbitrary code through malicious serialized objects. Affected products include: Microsoft .Net, Microsoft Powershell, Fedoraproject Fedora.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid deserializing untrusted data. Use safe serialization formats (JSON). Implement integrity checks and type allowlists.

CVE-2026-70337 HIGH
8.8 Aug 11

Remote code execution in Microsoft PowerShell Core is achievable by unauthenticated network attackers exploiting a relat

CVE-2020-1108 HIGH
7.5 May 21

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Cor

CVE-2018-8327 CRITICAL
9.8 Jul 11

A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code

CVE-2026-70338 HIGH
7.8 Aug 11

Code injection (CWE-94) in Microsoft PowerShell enables a local, unauthenticated attacker to bypass a security feature t

CVE-2026-58612 HIGH
7.5 Aug 11

Server-Side Request Forgery in Microsoft PowerShell Core versions 7.4.x, 7.5.x, and 7.6.x enables network-accessible una

CVE-2022-41076 HIGH
8.5 Dec 13

PowerShell Remote Code Execution Vulnerability. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitab

CVE-2026-59119 HIGH
7.3 Aug 11

Privilege escalation in Microsoft PowerShell 7.4.x, 7.5.x, and 7.6.x stems from incorrect default permissions (CWE-276),

CVE-2022-41121 HIGH
7.8 Dec 13

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2022-26788 HIGH
7.8 Apr 15

PowerShell Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack comple

CVE-2025-30399 HIGH
7.5 Jun 13

CVE-2025-30399 is an untrusted search path vulnerability in .NET and Visual Studio that allows unauthenticated remote at

CVE-2022-23267 HIGH
7.5 May 10

.NET and Visual Studio Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely e

CVE-2020-0951 MEDIUM
6.7 Sep 11

<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an at

Share

CVE-2023-21538 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy