ZeroHour

CVE-2018-8172

CVSS 3.1
7.8 high
EPSS
31%p98
Published
()
Modified
Description

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

Vendors
microsoft
Products
expression blend, visual studio, visual studio 2017
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news