onyx

onyx --cves cve-2023-38171

CVE-2023-38171

HIGH.NET
score
<0.1
cvss
7.5
epss
71.0%
published
2023-10-10
kev added
—
first seen

Microsoft QUIC contains a denial of service caused by improper handling of specific network conditions, letting remote attackers cause service disruption, exploit requires sending crafted network packets.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2023-10-10 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 69.7%2026-09-23: epss 69.7%2026-09-24: epss 69.7%2026-09-25: epss 69.7%2026-09-26: epss 69.7%2026-09-27: epss 69.7%2026-09-28: epss 69.7%2026-09-29: epss 69.7%2026-09-30: epss 69.7%2026-10-01: epss 69.7%2026-10-02: epss 69.7%2026-10-03: epss 69.7%2026-10-04: epss 69.7%2026-10-05: epss 69.7%2026-10-06: epss 69.7%2026-10-07: epss 69.7%2026-10-08: epss 69.7%2026-10-09: epss 69.7%2026-10-10: epss 69.7%2026-10-11: epss 71.0%2026-10-12: epss 71.0%2026-10-13: epss 71.0%2026-10-14: epss 71.0%2026-10-15: epss 71.0%2026-10-16: epss 71.0%2026-10-18: epss 71.0%2026-10-19: epss 71.0%2026-10-20: epss 71.0%2026-10-21: epss 71.0%71.0%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-476 NVD-CWE-noinfo

References 1