CVE-2023-23381: Visual Studio Remote Code Execution Vulnerability
Published Feb 14, 2023
·Updated
Visual Studio Remote Code Execution Vulnerability
Affected Software
12 affected componentsFixes available
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Microsoft Visual Studio 2015=3
Microsoft Visual Studio 2013=5
Microsoft Visual Studio 2017>=15.0<15.9.52
Microsoft Visual Studio 2019>=16.0<16.11.24
Microsoft Visual Studio 2022>=17.0<17.0.19
Microsoft Visual Studio 2022>=17.2<17.2.13
Microsoft Visual Studio 2022>=17.4<17.4.5
Microsoft Visual Studio 2022=17.4
Microsoft Visual Studio 2022=17.2
Microsoft Visual Studio 2022=17.0
Remediation
Event History
Feb 14, 2023
CVE Published
08:00 AM
Data Sourced
08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·08:09 PM
Data Sourced
via MITRE·08:09 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-23381?
CVE-2023-23381 is a remote code execution vulnerability in Visual Studio.
2
How severe is CVE-2023-23381?
CVE-2023-23381 has a severity rating of 7.8 out of 10, which is considered critical.
3
Which versions of Visual Studio are affected by CVE-2023-23381?
CVE-2023-23381 affects Visual Studio 2017 (includes 15.0 - 15.8), Visual Studio 2022 (versions 17.4, 17.2, and 17.0), Visual Studio 2019 (includes 16.0 - 16.10), Visual Studio 2015, and Visual Studio 2013.
4
How do I fix CVE-2023-23381 in Visual Studio 2017?
To fix CVE-2023-23381 in Visual Studio 2017, update to version 15.9 or later.
5
Where can I find the patch for CVE-2023-23381 in Visual Studio 2022?
You can find the patch for CVE-2023-23381 in Visual Studio 2022 version 17.4 at https://my.visualstudio.com/Downloads?q=Visual%20Studio%202022%20version%2017.4.