CVE-2023-28296: Visual Studio Remote Code Execution Vulnerability
Published Apr 11, 2023
·Updated
Visual Studio Remote Code Execution Vulnerability
Affected Software
12 affected componentsFixes available
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Microsoft Visual Studio 2017>=15.0<15.9.54
Microsoft Visual Studio 2019>=16.0<16.11.26
Microsoft Visual Studio 2022>=17.0<17.0.21
Microsoft Visual Studio 2022>=17.2.0<17.2.15
Microsoft Visual Studio 2022>=17.4.0<17.4.7
Microsoft Visual Studio 2022>=17.5.0<17.5.4
Microsoft Visual Studio 2022>=17.0.0<17.0.21
Microsoft Visual Studio 2022=17.2
Microsoft Visual Studio 2022=17.4
Microsoft Visual Studio 2022=17.0
Remediation
Event History
Apr 11, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:13 PM
Data Sourced
via MITRE·07:13 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-28296?
CVE-2023-28296 is a Visual Studio Remote Code Execution Vulnerability.
2
How severe is CVE-2023-28296?
CVE-2023-28296 has a severity rating of 7, which is considered high.
3
Which versions of Visual Studio are affected by CVE-2023-28296?
CVE-2023-28296 affects Visual Studio 2019 (16.0 - 16.10), Visual Studio 2022 (17.5, 17.2, 17.0), and Visual Studio 2017 (15.0 - 15.8).
4
How can I fix CVE-2023-28296?
To fix CVE-2023-28296, follow the remediation steps provided by Microsoft for your specific version of Visual Studio.
5
Where can I find more information about CVE-2023-28296?
You can find more information about CVE-2023-28296 on the Microsoft Security Response Center website.