CVE-2023-21567

MediumCVSS 5.6/10Last modified Aug 19, 2026

Description

Visual Studio Denial of Service Vulnerability

Metrics

CVSS 3.1 5.6/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-59

Affected software

VendorProductVersions
MicrosoftMicrosoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)>= 15.9.0, < 15.9.52
MicrosoftMicrosoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)>= 16.11.0, < 16.11.24
MicrosoftMicrosoft Visual Studio 2022 version 17.0>= 17.0.0, < 17.0.19
MicrosoftMicrosoft Visual Studio 2022 version 17.2>= 17.2.0, < 17.2.13
MicrosoftMicrosoft Visual Studio 2022 version 17.4>= 17.4.0, < 17.4.5

References

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-215687.3Microsoft SQL Server Integration Service (VS extension) Remote Code Execution VulnerabilityCVE-2023-215695.5Azure DevOps Server Spoofing VulnerabilityCVE-2023-21575.5A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.CVE-2023-215705.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-215715.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-215726.5Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-215735.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-215747.8Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in aCVE-2023-215757.8Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitraCVE-2023-215767.8Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitraCVE-2023-215775.5Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosureCVE-2023-215785.5Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure
CVE-2023-21567: Medium severity, CVSS 5.6 | Vulnix