VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 11, 2018· Updated Jun 17, 2026

CVE-2018-8172

CVE-2018-8172

Description

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

Affected products

13
  • Microsoft/Expression Blend3 versions
    cpe:2.3:a:microsoft:expression_blend:2:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:expression_blend:2:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:expression_blend:3:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:expression_blend:4:sp3:*:*:*:*:*:*
  • Microsoft/Visual Studio6 versions
    cpe:2.3:a:microsoft:visual_studio:2010:sp1:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:microsoft:visual_studio:2010:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio:2012:update_5:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio:2013:update_5:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 2010 Service Pack 1
  • Microsoft/Visual Studio 20172 versions
    cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2017:15.7.5:*:*:*:*:*:*:*
  • Microsoft/Expression Blend 4llm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: Service Pack 3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.