CVE-2018-8232
published 2018-07-11CVE-2018-8232: A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This…
PriorityP336high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
1.08%
61.7th percentile
A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual Studio.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft_visual_studio | — | — |
| microsoft | microsoft_visual_studio | — | — |
| microsoft | microsoft_visual_studio | — | — |
| microsoft | visual_studio_2017 | — | — |
| microsoft | visual_studio_2017 | — | — |
| msrc | microsoft_visual_studio_2017 | — | — |
| msrc | microsoft_visual_studio_2017_version_15.7.5 | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_msrc7.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Microsoft Macro Assembler Tampering Vulnerability
vendor_msrc·2018-07-10·CVSS 7.8
CVE-2018-8232 [HIGH] Microsoft Macro Assembler Tampering Vulnerability
Microsoft Macro Assembler Tampering Vulnerability
Description: A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code.
An attacker could introduce code into an application, which modifies data in an unintended manner.
The security updates addresses the vulnerability by ensuring that Microsoft Macro Assembler properly validates code logic.
Visual Studio: Visual Studio
Impact: Tampering
Exploit Status: Publicly Disclosed:No;Exploited:No
Remediation: Release Notes
Reference: https://my.visualstudio.com/Downloads?q=Visual Studio 2017
GHSA
GHSA-7rhj-mfh9-5577: A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability
ghsa_unreviewed·2022-05-14
CVE-2018-8232 [HIGH] CWE-20 GHSA-7rhj-mfh9-5577: A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability
A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual Studio.
No detection rules found.
No public exploits indexed.
http://www.securityfocus.com/bid/104640http://www.securitytracker.com/id/1041271https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8232http://www.securityfocus.com/bid/104640http://www.securitytracker.com/id/1041271https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8232
2018-07-11
Published