-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
NVD Vulnerability Details :
CVE-2023-36897
Modified
More Info
Official Page
Source
-
secure@microsoft.com
View Known Exploited Vulnerability (KEV) details
Published At
-
08 Aug, 2023 | 18:15
Updated At
-
19 May, 2026 | 18:38
Visual Studio Tools for Office Runtime Spoofing Vulnerability
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
N/A
Date Added:
N/A
Due Date:
N/A
Vulnerability Name:
N/A
Required Action:
N/A
Metrics
Type
Version
Base score
Base severity
Vector
Secondary
3.1
8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Primary
3.1
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Type:
Secondary
Version:
3.1
Base score:
8.1
Base severity:
HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Type:
Primary
Version:
3.1
Base score:
6.5
Base severity:
MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CPE Matches
Microsoft Corporation
microsoft
>>
365_apps
>>
-
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
Microsoft Corporation
microsoft
>>
365_apps
>>
-
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
Microsoft Corporation
microsoft
>>
office
>>
2019
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*
Microsoft Corporation
microsoft
>>
office
>>
2019
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*
Microsoft Corporation
microsoft
>>
office_long_term_servicing_channel
>>
2021
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x64:*
Microsoft Corporation
microsoft
>>
office_long_term_servicing_channel
>>
2021
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x86:*
Microsoft Corporation
microsoft
>>
visual_studio_2010_tools_for_office_runtime
>>
-
cpe:2.3:a:microsoft:visual_studio_2010_tools_for_office_runtime:-:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>
visual_studio_2017
>>
Versions from 15.0(inclusive) to 15.9.56(exclusive)
cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>
visual_studio_2019
>>
Versions from 16.0(inclusive) to 16.11.29(exclusive)
cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>
visual_studio_2022
>>
Versions from 17.2.0(inclusive) to 17.2.18(exclusive)
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*
Microsoft Corporation
microsoft
>>
visual_studio_2022
>>
Versions from 17.4.0(inclusive) to 17.4.10(exclusive)
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*
Microsoft Corporation
microsoft
>>
visual_studio_2022
>>
Versions from 17.6.0(inclusive) to 17.6.6(exclusive)
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Load More
Weaknesses
CWE ID
Type
Source
CWE-20
Secondary
secure@microsoft.com
NVD-CWE-noinfo
Primary
nvd@nist.gov
CWE ID:
CWE-20
Type:
Secondary
Source:
secure@microsoft.com
CWE ID:
NVD-CWE-noinfo
Type:
Primary
Source:
nvd@nist.gov
Evaluator Description
Evaluator Impact
Evaluator Solution
Vendor Statements
References
Hyperlink
Source
Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897
secure@microsoft.com
Patch
Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897
af854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
Hyperlink:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897
Source:
secure@microsoft.com
Resource:
Patch
Vendor Advisory
Hyperlink:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897
Source:
af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Vendor Advisory
Change History
0
Changes found
Details not found