CVE Database
/

CVE-2023-36796

Back to search

CVE-2023-36796

Published: Sep 12, 2023

Modified: Oct 30, 2025

PUBLISHED

CVSS v3.1

7.8

HIGH

Description

Visual Studio Remote Code Execution Vulnerability

VendorProductVersions

Microsoft

Microsoft Visual Studio 2022 version 17.6

affected
17.6.0 - < 17.6.9

Microsoft

Microsoft Visual Studio 2022 version 17.7

affected
17.7.0 - < 17.7.6

Microsoft

Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)

affected
15.9.0 - < 15.9.57

Microsoft

Microsoft Visual Studio 2022 version 17.2

affected
17.2.0 - < 17.2.21

Microsoft

Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

affected
16.11.0 - < 16.11.30

Microsoft

Microsoft Visual Studio 2022 version 17.4

affected
17.4.0 - < 17.4.13

Microsoft

Microsoft Visual Studio 2013 Update 5

affected
12.0.0 - < 12.0.40707.0

Microsoft

Microsoft Visual Studio 2015 Update 3

affected
14.0.0 - < 14.0.27559.0

Microsoft

.NET 7.0

affected
7.0.0 - < 7.0.13

Microsoft

.NET 6.0

affected
6.0.0 - < 6.0.24

Microsoft

PowerShell 7.2

affected
7.2.0 - < 7.2.12

Microsoft

Microsoft .NET Framework 3.5 AND 4.8

affected
4.8.0 - < 4.8.04667.03

Microsoft

Microsoft .NET Framework 4.8

affected
4.8.0 - < 4.8.04667.02

Microsoft

Microsoft .NET Framework 3.5 AND 4.7.2

affected
4.7.0 - < 4.7.04063.05

Microsoft

Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2

affected
3.0.0.0 - < 10.0.14393.6252

Microsoft

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

affected
4.7.0 - < 4.7.04063.01

Microsoft

Microsoft .NET Framework 3.5 AND 4.8.1

affected
4.8.1 - < 4.8.09186.01

Microsoft

Microsoft .NET Framework 4.6.2

affected
4.7.0 - < 4.7.04063.01

Microsoft

Microsoft .NET Framework 3.5 and 4.6.2

affected
4.7.0 - < 10.0.10240.20162

Microsoft

Microsoft .NET Framework 2.0 Service Pack 2

affected
2.0.0 - < 3.0.30729.8957

Microsoft

Microsoft .NET Framework 3.0 Service Pack 2

affected
3.0.0 - < 3.0.30729.8957

Microsoft

Microsoft .NET Framework 3.5

affected
3.5.0 - < 3.0.30729.8957

Microsoft

Microsoft .NET Framework 3.5.1

affected
3.5.0 - < 3.0.30729.8957

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now