Rapid7 Vulnerability & Exploit Database

Microsoft CVE-2023-36792: Visual Studio Remote Code Execution Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft CVE-2023-36792: Visual Studio Remote Code Execution Vulnerability

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
09/12/2023
Created
09/13/2023
Added
09/12/2023
Modified
12/12/2023

Description

Microsoft CVE-2023-36792: Visual Studio Remote Code Execution Vulnerability

Solution(s)

  • msft-kb5029915-542716df-caf5-415e-8c9f-c38085d34259
  • msft-kb5029919-0e17a3d0-b8fc-4532-9c71-bc2db076cfde
  • msft-kb5029919-84b53a65-a7f5-4a47-a0aa-42527999c1b1
  • msft-kb5029919-95ddc985-8460-4a29-9aa0-f709247af5a0
  • msft-kb5029919-fe3f6ce9-d8d5-441a-950d-346e90ab5b61
  • msft-kb5029920-a426c73a-7524-4c7f-a70d-85667828cd9b
  • msft-kb5029921-3b881985-a34f-4d5a-ad13-86c323c62882
  • msft-kb5029921-628c531c-67ef-4610-9abe-1aebed19b278
  • msft-kb5029922-a41d238e-0ec3-4a3a-9774-7a50cb8c1b6a
  • msft-kb5029923-0d6b22fb-3ac1-43ad-bc95-075d978a91d6
  • msft-kb5029923-2d155da6-4bb5-4a6e-9ee7-1e4df8daba37
  • msft-kb5029923-84573830-b6cc-474a-bc71-6621688c948a
  • msft-kb5029923-97dd8942-1d6a-4ed4-8215-99bb804e8498
  • msft-kb5029925-34d51172-a980-4c94-ab76-97236f5f40e1
  • msft-kb5029925-3a2d3719-6f01-4e23-bea3-99cd4bb7c05c
  • msft-kb5029925-b0e4432a-60a1-4e3c-872a-ba7012bcb442
  • msft-kb5029926-b08945ff-60f4-4622-8264-b63c6a6b0795
  • msft-kb5029928-3f086561-149b-44e8-9160-25222875a535
  • msft-kb5029928-416a429e-74cf-4982-ac66-cb93e0566340
  • msft-kb5029931-0dd59ec5-53f7-4fed-97fe-8a98982b43c3
  • msft-kb5029931-98a91386-2063-4fbf-ab09-71c6c8b4c2ce
  • msft-kb5029931-f064c2b5-b2f4-4eba-a69d-c6fd93832ec8
  • msft-kb5029937-3f3eaa90-4538-49e1-b566-8ae52a2536e6
  • msft-kb5029937-7e72246e-c756-4dcc-95fa-b4f2f66df33d
  • msft-kb5029938-7ab7a780-4264-47dd-a618-c43acf0da018
  • msft-kb5030160-18caa5c4-3297-4360-aa15-1892e4ba78d8
  • msft-kb5030213-8a70d83a-8fb5-4fec-a989-9ca8a6ebd163
  • msft-kb5030213-d028e1ce-791f-4d9d-b797-dba0788453c4
  • microsoft-windows-windows_server_2016-1607-kb5030213
  • msft-kb5030220-bff189a6-b562-4c86-acc5-8f50b2baf18e
  • msft-kb5030220-ec0a57a4-61ea-425d-9135-c4ae102c1cf5

References

  • https://attackerkb.com/topics/cve-2023-36792
  • CVE - 2023-36792
  • 5029915
  • 5029916
  • 5029917
  • 5029919
  • 5029920
  • 5029921
  • 5029922
  • 5029923
  • 5029924
  • 5029925
  • 5029926
  • 5029927
  • 5029928
  • 5029929
  • 5029931
  • 5029932
  • 5029933
  • 5029937
  • 5029938
  • 5030160
  • 5030178
  • 5030179
  • 5030180
  • 5030181
  • 5030182
  • 5030183
  • 5030184
  • 5030185
  • 5030186
  • 5030213
  • 5030220
  • 5030559
  • 5030560
  • 5031217
  • 5032874
  • 5032875
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;