5.5

CVE-2023-28263

Visual Studio Information Disclosure Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Visual Studio 2019 Version >= 16.0 < 16.11.26
Microsoft ≫ Visual Studio 2022 Version >= 17.0 < 17.0.21
Microsoft ≫ Visual Studio 2022 Version >= 17.2 < 17.2.15
Microsoft ≫ Visual Studio 2022 Version >= 17.4 < 17.4.7
Microsoft ≫ Visual Studio 2022 Version >= 17.5 < 17.5.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.454
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
secure@microsoft.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-170 Improper Null Termination

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.