Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | affected |
|
||||||
| Microsoft | Microsoft Office 2019 | affected |
|
||||||
| Microsoft | Microsoft Office LTSC 2021 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.2 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.4 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.6 | affected |
|
||||||
| Microsoft | Visual Studio 2010 Tools for Office Runtime | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-40817 | Visual Studio Tools for Office Runtime Spoofing Vulnerability |
Mon, 10 Aug 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 10 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft office 2019
Microsoft office 2021 |
|
| CPEs | cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* |
cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:* |
| Vendors & Products |
Microsoft visual Studio
|
Microsoft office 2019
Microsoft office 2021 |
Tue, 19 May 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x86:* |
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x86:* |
Wed, 25 Feb 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft office Long Term Servicing Channel
Microsoft visual Studio |
|
| CPEs | cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_2010_tools_for_office_runtime:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft office Long Term Servicing Channel
Microsoft visual Studio |
Tue, 15 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Wed, 01 Jan 2025 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft office Long Term Servicing Channel
Microsoft visual Studio |
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-08-10T15:11:57.477Z
Reserved: 2023-06-27T20:28:49.988Z
Link: CVE-2023-36897
Vulnrichment
Updated: 2024-08-02T17:01:09.643Z
NVD
Status : Modified
Published: 2023-08-08T18:15:15.913
Modified: 2026-08-10T16:18:31.840
Link: CVE-2023-36897
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-20
Improper Input Validation
- NVD-CWE-noinfo