CVE-2023-23381

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

Visual Studio Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

VendorProductVersions
MicrosoftMicrosoft Visual Studio 2013 Update 5>= 12.0.0, < 12.0.40700.0
MicrosoftMicrosoft Visual Studio 2015 Update 3>= 14.0.0, < 14.0.27555.0
MicrosoftMicrosoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)>= 15.9.0, < 15.9.52
MicrosoftMicrosoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)>= 16.11.0, < 16.11.24
MicrosoftMicrosoft Visual Studio 2022 version 17.0>= 17.0.0, < 17.0.19
MicrosoftMicrosoft Visual Studio 2022 version 17.2>= 17.2.0, < 17.2.13
MicrosoftMicrosoft Visual Studio 2022 version 17.4>= 17.4.0, < 17.4.5

References

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-233826.5Azure Machine Learning Compute Instance Information Disclosure VulnerabilityCVE-2023-233834.7Service Fabric Explorer Spoofing VulnerabilityCVE-2023-233847.3Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2023-233857.0Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege VulnerabilityCVE-2023-233888.8Windows Bluetooth Driver Elevation of Privilege VulnerabilityCVE-2023-233896.3Microsoft Defender Elevation of Privilege VulnerabilityCVE-2023-23395.4Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-233907.83D Builder Remote Code Execution VulnerabilityCVE-2023-233915.5Office for Android Spoofing VulnerabilityCVE-2023-233929.8HTTP Protocol Stack Remote Code Execution VulnerabilityCVE-2023-233937.0Windows BrokerInfrastructure Service Elevation of Privilege VulnerabilityCVE-2023-233945.5Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability