UNKNOWN Microsoft PoC
CVE-2018-8172
Visual Studio Remote Code Execution Vulnerability
Microsoft Security Update 2018-Jul: Visual Studio Remote Code Execution Vulnerability
Affected Products
- Expression Blend 3 Service Pack 1
- Expression Blend 2 Service Pack 2
- Microsoft Visual Studio 2010 Service Pack 1
- Microsoft Visual Studio 2012 Update 5
- Microsoft Visual Studio 2013 Update 5
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017
- Microsoft Visual Studio 2017 version 15.7.5
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8172
- https://nvd.nist.gov/vuln/detail/CVE-2018-8172
This unknown severity vulnerability was published on 2018-07-10 via Microsoft. 🚨 A public proof-of-concept exploit is available on GitHub. EPSS score: 32.8% (top 2% of all CVEs by exploitation probability). Affected: Expression Blend 3 Service Pack 1, Expression Blend 2 Service Pack 2, Microsoft Visual Studio 2010 Service Pack 1 and 5 more.
vulnfeed aggregates 10476 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.