CVE-2018-8172

High · 7.8

CVSS

7.8

EPSS

33.6%

Published

Jul 11, 2018

CISA due date

—

The record

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

Affected packages

Ecosystem	Package	Introduced	Fixed