PT-2023-5050

CVE-2023-36796

·

تاريخ النشر

2023-09-12

·

تاريخ التحديث

2026-10-01

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Visual Studio (affected versions not specified)
Description The issue is related to insufficient input validation in Microsoft Visual Studio, which can be exploited to execute arbitrary code. This can allow an attacker to run malicious code on the system. The vulnerability is associated with the DiaSymReader.dll when reading a corrupted PDB file, potentially leading to remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-H7JM-G87P-5935
ALT-PU-2024-1065
ALT-PU-2024-1066
ALT-PU-2024-1067
ALT-PU-2024-1068
ALT-PU-2024-1069
ALT-PU-2024-16792
ALT-PU-2024-16794
ALT-PU-2024-16796
ALT-PU-2024-16939
ALT-PU-2024-2761
ALT-PU-2024-2763
ALT-PU-2024-2765
ALT-PU-2024-2767
BIT-DOTNET-2023-36796
BIT-DOTNET-SDK-2023-36796
CLEANSTART-2025-OJ41035
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾