CVE-2018-8172

State: Published
Severity: Not scored
Published: Jul 11, 2018
Updated: Aug 5, 2024
Reserved: Mar 14, 2018

Description

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Microsoft Visual StudioMicrosoft	2010 Service Pack 1Affected 2012 Update 5Affected 2013 Update 5Affected 2015 Update 3Affected 2017Affected 2017 Version 15.7.5Affected 2017 Version 15.8 PreviewAffected
Expression Blend 4Microsoft	Service Pack 3Affected

References

1041253vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8172
104616vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.