CVE-2018-8172

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

Affected products

Expression Blend 4, Visual Studio

Microsoft Expression Blend

= 2, 3, 4

Microsoft Visual Studio

= 2010, 2012, 2013, 2015

Microsoft Visual Studio 2017

All versions

CVSS 2.0

9.3 HIGH

CVSS 3.1

7.8 HIGH

EPSS

31.0% (98th percentile)

NVD status

Modified

Published

2018-07-11