VYPR
High severity8.1NVD Advisory· Published Aug 8, 2023· Updated Aug 10, 2026

CVE-2023-36897

CVE-2023-36897

Description

Visual Studio Tools for Office Runtime Spoofing Vulnerability

Affected products

21
  • cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*+ 1 more
    • cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
    • cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*+ 2 more
    • cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*
    • (no CPE)range: 16.0.1
  • cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x86:*
  • cpe:2.3:a:microsoft:visual_studio_2010_tools_for_office_runtime:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
    Range: >=15.0,<15.9.56
  • cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*range: >=16.0,<16.11.29
    • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*range: >=17.6.0,<17.6.6
    • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*range: >=17.2.0,<17.2.18
  • (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 10.0.0
  • Microsoft/Microsoft 365 Apps for Enterprisev5
    Range: 16.0.1
  • Range: 19.0.0
  • Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)v5
    Range: 15.9.0
  • Microsoft/Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)v5
    Range: 16.11.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.2v5
    Range: 17.2.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.4v5
    Range: 17.4.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.6v5
    Range: 17.6.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.