First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-36897

MediumCVSS 6.5/10Last modified Aug 10, 2026

Description

Visual Studio Tools for Office Runtime Spoofing Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft 365 Apps for Enterprise	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office 2019	>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office LTSC 2021	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	>= 15.9.0, < 15.9.56
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	>= 16.11.0, < 16.11.29
Microsoft	Microsoft Visual Studio 2022 version 17.2	>= 17.2.0, < 17.2.18
Microsoft	Microsoft Visual Studio 2022 version 17.4	>= 17.4.0, < 17.4.10
Microsoft	Microsoft Visual Studio 2022 version 17.6	>= 17.6.0, < 17.6.6
Microsoft	Visual Studio 2010 Tools for Office Runtime	>= 10.0.0, < 10.0.60910

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897Patch, Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897Patch, Vendor Advisory

Timeline

Published: Aug 8, 2023
Last modified: Aug 10, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-368987.8Tablet Windows User Interface Application Core Remote Code Execution Vulnerability CVE-2023-368998.8ASP.NET Elevation of Privilege Vulnerability CVE-2023-36909.8A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown funct CVE-2023-369007.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2023-369027.0Windows Runtime Remote Code Execution Vulnerability CVE-2023-369039.8Windows System Assessment Tool Elevation of Privilege Vulnerability CVE-2023-369047.8Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-369057.5Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability CVE-2023-369067.5Windows Cryptographic Services Information Disclosure Vulnerability CVE-2023-369077.5Windows Cryptographic Services Information Disclosure Vulnerability CVE-2023-369086.5Windows Hyper-V Information Disclosure Vulnerability CVE-2023-369096.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability