First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-23390

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

3D Builder Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	3D Builder	>= 20.0.0, < 20.0.2.0

References

Timeline

Published: Feb 14, 2023
Last modified: Aug 19, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-233915.5Office for Android Spoofing Vulnerability CVE-2023-233929.8HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2023-233937.0Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability CVE-2023-233945.5Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability CVE-2023-233953.1Microsoft SharePoint Server Spoofing Vulnerability CVE-2023-233966.5Microsoft Excel Denial of Service Vulnerability CVE-2023-233979.8Microsoft Outlook Elevation of Privilege Vulnerability CVE-2023-233987.1Microsoft Excel Spoofing Vulnerability CVE-2023-233997.8Microsoft Excel Remote Code Execution Vulnerability CVE-2023-23405.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-234007.2Windows DNS Server Remote Code Execution Vulnerability CVE-2023-234017.8Windows Media Remote Code Execution Vulnerability

CVE-2023-23390: High severity, CVSS 7.8 | Vulnix