Lucene search

K
nvd[email protected]NVD:CVE-2023-36792
HistorySep 12, 2023 - 5:15 p.m.

CVE-2023-36792

2023-09-1217:15:14
CWE-190
web.nvd.nist.gov
1
visual studio
remote code execution
vulnerability
cve-2023-36792

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

Visual Studio Remote Code Execution Vulnerability

Affected configurations

NVD
Node
microsoft.net_frameworkMatch3.5.1
AND
microsoftwindows_server_2008Matchr2sp1x64
Node
microsoft.net_frameworkMatch3.5
AND
microsoftwindows_server_2012Matchr2
Node
microsoft.net_frameworkMatch2.0sp2
OR
microsoft.net_frameworkMatch3.0sp2
OR
microsoft.net_frameworkMatch4.6.2
AND
microsoftwindows_server_2008Match-sp2
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10_1809Match-
OR
microsoftwindows_10_21h2Match-
OR
microsoftwindows_10_22h2Match-
OR
microsoftwindows_11_21h2Match-
OR
microsoftwindows_server_2019Match-
OR
microsoftwindows_server_2022Match-
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.8.1
AND
microsoftwindows_10_21h2Match-
OR
microsoftwindows_10_22h2Match-
OR
microsoftwindows_11_21h2Match-
OR
microsoftwindows_11_22h2Match-
OR
microsoftwindows_server_2022Match-
Node
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10_1607Match-
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Match-
Node
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.7.2
AND
microsoftwindows_10_1809Match-
OR
microsoftwindows_server_2019Match-
Node
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
AND
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
Node
microsoft.netMatch6.0.0-
OR
microsoft.netMatch7.0.0
Node
microsoftvisual_studio_2017Range15.0–15.9.57
OR
microsoftvisual_studio_2019Range16.0–16.11.30
OR
microsoftvisual_studio_2022Range17.2–17.2.19
OR
microsoftvisual_studio_2022Range17.4–17.4.11
OR
microsoftvisual_studio_2022Range17.7–17.7.4

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%