CVE-2023-33139

CWE-125 — Out-of-bounds Read4 documents4 sources
Severity
5.5MEDIUM
EPSS
1.3%
top 20.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Microsoft Microsoft Visual Studio 2013 Update 5Microsoft Microsoft Visual Studio 2015 Update 3Microsoft Microsoft Visual Studio 2017 Version 15.9 (includes 15.0 - 15.8)+9 more
Timeline
PublishedJun 14

Description

Visual Studio Information Disclosure Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages12 packages

▶NVDmicrosoft/visual_studio_201715.0 — 15.8+1
▶NVDmicrosoft/visual_studio_201916.11 — 16.11.27+1
▶NVDmicrosoft/visual_studio_202217.0 — 17.0.22+3
▶CVEListV5microsoft/microsoft_visual_studio_2013_update_512.0.0 — 12.0.40702.0
▶CVEListV5microsoft/microsoft_visual_studio_2015_update_314.0.0 — 14.0.27554.0

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cwvc-96pq-qp7w: Visual Studio Information Disclosure Vulnerability↗2023-06-14
▶
CVEList
Visual Studio Information Disclosure Vulnerability↗2023-06-13
▶

📋Vendor Advisories

1
Microsoft
Visual Studio Information Disclosure Vulnerability↗2023-06-13
▶
CVE-2023-33139 (MEDIUM CVSS 5.5) | Visual Studio Information Disclosur | cvebase.io