CVE-2023-36897

MediumCVSS 6.5/10Last modified Aug 10, 2026

Description

Visual Studio Tools for Office Runtime Spoofing Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)>= 15.9.0, < 15.9.56
MicrosoftMicrosoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)>= 16.11.0, < 16.11.29
MicrosoftMicrosoft Visual Studio 2022 version 17.2>= 17.2.0, < 17.2.18
MicrosoftMicrosoft Visual Studio 2022 version 17.4>= 17.4.0, < 17.4.10
MicrosoftMicrosoft Visual Studio 2022 version 17.6>= 17.6.0, < 17.6.6
MicrosoftVisual Studio 2010 Tools for Office Runtime>= 10.0.0, < 10.0.60910

References

Timeline

Published
Aug 8, 2023
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-368987.8Tablet Windows User Interface Application Core Remote Code Execution VulnerabilityCVE-2023-368998.8ASP.NET Elevation of Privilege VulnerabilityCVE-2023-36909.8A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functCVE-2023-369007.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-369027.0Windows Runtime Remote Code Execution VulnerabilityCVE-2023-369039.8Windows System Assessment Tool Elevation of Privilege VulnerabilityCVE-2023-369047.8Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2023-369057.5Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityCVE-2023-369067.5Windows Cryptographic Services Information Disclosure VulnerabilityCVE-2023-369077.5Windows Cryptographic Services Information Disclosure VulnerabilityCVE-2023-369086.5Windows Hyper-V Information Disclosure VulnerabilityCVE-2023-369096.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-36897: Medium severity, CVSS 6.5 | Vulnix