CVE-2023-21785

Microsoft 3D Builder is affected by a remote code execution vulnerability. The issue stems from insufficient input validation in the 3D Builder program, which can be exploited by opening a specially crafted malicious file, allowing an attacker to execute arbitrary code. Affected software: 3D Buil...

CVE-2023-21789

CVE-2023-21789 concerns the Microsoft 3D Builder app, where a Remote Code Execution vulnerability could allow an attacker to execute arbitrary code on a vulnerable system. The vulnerability is associated with the 3D Builder component and is rated with a CVSS v3.1 base score of 7.8 (High), with lo...

CVE-2023-21793

The provided connected docs identify a Microsoft 3D Builder remote code execution vulnerability (CVE-2023-21793). The root cause described in PT-2023-1256 is insufficient input validation in the 3D Builder program, enabling an attacker to execute arbitrary code via a specially crafted file. Impac...

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

CVE-2023-21780

CVE-2023-21780 affects Microsoft 3D Builder. Root cause is insufficient input validation in 3D Builder that can lead to arbitrary code execution when a user opens a specially crafted file. Exploitation requires user interaction (open file) and has a local attack surface with high impact on confid...

CVE-2023-21780 3D Builder Remote Code Execution Vulnerability

...

PT-2023-1047 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can be exploited by opening a specially crafted malicious file, allowing an attacker to execute...

CVE-2023-21790

The CVE-2023-21790 entry concerns Microsoft 3D Builder. Affected component: 3D Builder app. Root cause described in PT-2023-1255 as insufficient input validation in the 3D Builder program, enabling arbitrary code execution by opening a specially crafted file. Impact: arbitrary code execution on a...

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

CVE-2023-21791 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-21782 3D Builder Remote Code Execution Vulnerability

...

PT-2023-1048 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can allow an attacker to execute arbitrary code by opening a specially crafted malicious file. This...

KLA20156 Multiple vulnerabilities in Microsoft Apps

Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2023-21792 CVE-2023-21785 CVE-2023-21791 CVE-2023-21782 CVE-2023-21786 CVE-2023-21788 CVE-2023-21789 CVE-2023-21790 CVE-2023-217...

CVE-2023-21787 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-21784 3D Builder Remote Code Execution Vulnerability

...

Microsoft 3D Builder GLB Memory Corruption Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. An out-of-bounds write vulnerability exists in Microsoft 3D Builder GLB processing, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the...

Microsoft 3D Builder GLTF Memory Corruption Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. A memory corruption vulnerability exists in Microsoft 3D Builder GLTF processing, which can be exploited by an attacker to submit a special file request and trick the user into parsing it, which can crash the application or execut...

Microsoft 3D Builder OBJ Code Execution Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. A code execution vulnerability exists in the Microsoft 3D Builder OBJ handling, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the...

(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...