5.5

CVE-2023-28263

Visual Studio Information Disclosure Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Visual Studio 2019 Version >= 16.0 < 16.11.26
Microsoft ≫ Visual Studio 2022 Version >= 17.0 < 17.0.21
Microsoft ≫ Visual Studio 2022 Version >= 17.2 < 17.2.15
Microsoft ≫ Visual Studio 2022 Version >= 17.4 < 17.4.7
Microsoft ≫ Visual Studio 2022 Version >= 17.5 < 17.5.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.501
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secure@microsoft.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-170 Improper Null Termination

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.