← CVE Intelligence

CVE-2023-36897

Visual Studio Tools for Office Runtime Spoofing Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft 365 Apps for Enterprise	affected 16.0.1 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office 2019	affected 19.0.0 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office LTSC 2021	affected 16.0.1 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	affected 15.9.0 before 15.9.56
Microsoft / Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	affected 16.11.0 before 16.11.29
Microsoft / Microsoft Visual Studio 2022 version 17.2	affected 17.2.0 before 17.2.18
Microsoft / Microsoft Visual Studio 2022 version 17.4	affected 17.4.0 before 17.4.10
Microsoft / Microsoft Visual Studio 2022 version 17.6	affected 17.6.0 before 17.6.6
Microsoft / Visual Studio 2010 Tools for Office Runtime	affected 10.0.0 before 10.0.60910

CWE

CWE-20

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897

ADP enrichment

CVE

No English description supplied.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897

CISA-ADP

No English description supplied.

No references supplied.