Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) vulnerability

What happened

ASP.NET Core Denial of Service Vulnerability

Affected versions

Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3): 16.0 through before 16.4.23 (custom); 16.0.0 through before 16.7.16 (custom); 15.0.0 through before 16.9.7 (custom); 16.10.0 through before 16.10.1 (custom); 8.1.0 through before 8.10.1 (custom); 3.1 through before 3.1.16 (custom); 5.0.0 through before 5.0.7 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.