CVE-2023-28299: Visual Studio Spoofing Vulnerability
Published Apr 11, 2023
·Updated
Visual Studio Spoofing Vulnerability
Affected Software
12 affected componentsFixes available
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Microsoft Visual Studio 2017>=15.0<15.9.54
Microsoft Visual Studio 2019>=16.0<16.11.26
Microsoft Visual Studio 2022>=17.0.0<17.0.21
Microsoft Visual Studio 2022>=17.2.0<17.2.15
Microsoft Visual Studio 2022>=17.4.0<17.4.7
Microsoft Visual Studio 2022>=17.5.0<17.5.4
Microsoft Visual Studio 2022>=17.0<17.0.21
Microsoft Visual Studio 2022=17.4
Microsoft Visual Studio 2022=17.2
Microsoft Visual Studio 2022=17.0
Remediation
Event History
Apr 11, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:13 PM
Data Sourced
via MITRE·07:13 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-28299?
CVE-2023-28299 is a Visual Studio Spoofing Vulnerability.
2
What is the severity of CVE-2023-28299?
CVE-2023-28299 has a severity rating of high (5.5).
3
Which versions of Visual Studio are affected by CVE-2023-28299?
CVE-2023-28299 affects Visual Studio 2022 version 17.2, 16.11, 17.5, and 17.0, as well as Visual Studio 2017 version 15.9.
4
How can I fix CVE-2023-28299 in Visual Studio 2022 version 17.2?
To fix CVE-2023-28299 in Visual Studio 2022 version 17.2, you can download and install the patch from the following URL: [Visual Studio 2022 version 17.2 patch](https://my.visualstudio.com/Downloads?q=Visual%20Studio%202022%20version%2017.2).
5
Where can I find more information about CVE-2023-28299?
You can find more information about CVE-2023-28299 on the Microsoft Security Response Center website: [CVE-2023-28299](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28299).