Technical Information

A denial of service in Microsoft Visual Studio where an authenticated attacker can exploit this vulnerability by crafting a malicious JSON Web Encryption token with high compression ration. When this token is processed by a server, leads to excessive memory allocation and process time during decompression, causing a denial-of-service condition.

Patch Release Date: Jan 09, 2024
Further information on this vulnerability is available at: CVE-2024-21319