CVE-2023-33139 - Vulnerability Details - OpenCVE

Visual Studio Information Disclosure Vulnerability

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Microsoft	Visual Studio Visual Studio 2017 Visual Studio 2019 Visual Studio 2022

Configuration 1 [-]

OR	cpe:2.3:a:microsoft:visual_studio:2015:update3::::::
	cpe:2.3:a:microsoft:visual_studio:2015:update5::::::
	cpe:2.3:a:microsoft:visual_studio_2017::::::::
	cpe:2.3:a:microsoft:visual_studio_2017::::::::
	cpe:2.3:a:microsoft:visual_studio_2019::::::::
	cpe:2.3:a:microsoft:visual_studio_2019::::::::
	cpe:2.3:a:microsoft:visual_studio_2022::::::::
	cpe:2.3:a:microsoft:visual_studio_2022::::::::
	cpe:2.3:a:microsoft:visual_studio_2022::::::::
	cpe:2.3:a:microsoft:visual_studio_2022::::::::

No data.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139

History

Wed, 01 Jan 2025 02:15:00 +0000

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:microsoft:visual_studio:2013:update_5:::::: cpe:2.3:a:microsoft:visual_studio:2022:::::::* cpe:2.3:a:microsoft:visual_studio_2022:17.0:::::::* cpe:2.3:a:microsoft:visual_studio_2022:17.2:::::::* cpe:2.3:a:microsoft:visual_studio_2022:17.4:::::::*

Wed, 02 Oct 2024 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2023-06-13T23:25:55.404Z

Updated: 2025-01-01T01:43:39.771Z

Reserved: 2023-05-17T21:16:44.896Z

Link: CVE-2023-33139

Vulnrichment

Updated: 2024-08-02T15:39:35.318Z

NVD

Status : Modified

Published: 2023-06-14T00:15:12.380

Modified: 2024-11-21T08:04:58.090

Link: CVE-2023-33139

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-33139", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2023-05-17T21:16:44.896Z", "datePublished": "2023-06-13T23:25:55.404Z", "dateUpdated": "2025-01-01T01:43:39.771Z"}, "containers": {"cna": {"title": "Visual Studio Information Disclosure Vulnerability", "datePublic": "2023-06-13T07:00:00+00:00", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*", "versionStartIncluding": "15.9.0", "versionEndExcluding": "15.9.55"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.2.0", "versionEndExcluding": "17.2.16"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "versionStartIncluding": "16.11.0", "versionEndExcluding": "16.11.27"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.0.0", "versionEndExcluding": "17.0.22"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.4.0", "versionEndExcluding": "17.4.8"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:update_5:*:*:*:*:*:*", "versionStartIncluding": "12.0.0", "versionEndExcluding": "12.0.40702.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:update3:*:*:*:*:*:*", "versionStartIncluding": "14.0.0", "versionEndExcluding": "14.0.27554.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.6.0", "versionEndExcluding": "17.6.3"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)", "platforms": ["Unknown"], "versions": [{"version": "15.9.0", "lessThan": "15.9.55", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.2", "platforms": ["Unknown"], "versions": [{"version": "17.2.0", "lessThan": "17.2.16", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)", "platforms": ["Unknown"], "versions": [{"version": "16.11.0", "lessThan": "16.11.27", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.0", "platforms": ["Unknown"], "versions": [{"version": "17.0.0", "lessThan": "17.0.22", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.4", "platforms": ["Unknown"], "versions": [{"version": "17.4.0", "lessThan": "17.4.8", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2013 Update 5", "platforms": ["Unknown"], "versions": [{"version": "12.0.0", "lessThan": "12.0.40702.0", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2015 Update 3", "platforms": ["Unknown"], "versions": [{"version": "14.0.0", "lessThan": "14.0.27554.0", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.6", "platforms": ["Unknown"], "versions": [{"version": "17.6.0", "lessThan": "17.6.3", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Visual Studio Information Disclosure Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-125: Out-of-bounds Read", "lang": "en-US", "type": "CWE", "cweId": "CWE-125"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-01-01T01:43:39.771Z"}, "references": [{"name": "Visual Studio Information Disclosure Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:39:35.318Z"}, "title": "CVE Program Container", "references": [{"name": "Visual Studio Information Disclosure Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-02T16:39:22.157046Z", "id": "CVE-2023-33139", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-02T16:39:30.480Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139", "name": "Visual Studio Information Disclosure Vulnerability", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:39:35.318Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-33139", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-02T16:39:22.157046Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-02T16:39:27.369Z"}}], "cna": {"title": "Visual Studio Information Disclosure Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)", "versions": [{"status": "affected", "version": "15.9.0", "lessThan": "15.9.55", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.2", "versions": [{"status": "affected", "version": "17.2.0", "lessThan": "17.2.16", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)", "versions": [{"status": "affected", "version": "16.11.0", "lessThan": "16.11.27", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.0", "versions": [{"status": "affected", "version": "17.0.0", "lessThan": "17.0.22", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.4", "versions": [{"status": "affected", "version": "17.4.0", "lessThan": "17.4.8", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2013 Update 5", "versions": [{"status": "affected", "version": "12.0.0", "lessThan": "12.0.40702.0", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2015 Update 3", "versions": [{"status": "affected", "version": "14.0.0", "lessThan": "14.0.27554.0", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.6", "versions": [{"status": "affected", "version": "17.6.0", "lessThan": "17.6.3", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2023-06-13T07:00:00+00:00", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139", "name": "Visual Studio Information Disclosure Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Visual Studio Information Disclosure Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "15.9.55", "versionStartIncluding": "15.9.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.2.16", "versionStartIncluding": "17.2.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "16.11.27", "versionStartIncluding": "16.11.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.0.22", "versionStartIncluding": "17.0.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.4.8", "versionStartIncluding": "17.4.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:update_5:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.0.40702.0", "versionStartIncluding": "12.0.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:update3:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "14.0.27554.0", "versionStartIncluding": "14.0.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.6.3", "versionStartIncluding": "17.6.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-01-01T01:43:39.771Z"}}}, "cveMetadata": {"cveId": "CVE-2023-33139", "state": "PUBLISHED", "dateUpdated": "2025-01-01T01:43:39.771Z", "dateReserved": "2023-05-17T21:16:44.896Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2023-06-13T23:25:55.404Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*", "matchCriteriaId": "62FE95C2-066B-491D-82BF-3EF173822B2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:2015:update5:*:*:*:*:*:*", "matchCriteriaId": "647EBBAA-C731-4954-A62C-2B1AAFB1061C", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB877090-2FA4-4E6A-99D1-70375A3AD90E", "versionEndExcluding": "15.8", "versionStartIncluding": "15.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*", "matchCriteriaId": "979A6A3D-64F8-4099-A00D-16F5BAC2BD79", "versionEndExcluding": "15.9.55", "versionStartIncluding": "15.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "matchCriteriaId": "26472C42-CDB4-4176-B10B-3BF26F5030E3", "versionEndIncluding": "16.10", "versionStartIncluding": "16.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFF8A760-E6E1-483D-A955-102A8D82B62C", "versionEndExcluding": "16.11.27", "versionStartIncluding": "16.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "2B1F98BC-0D82-4AEB-9E1E-D67325E99385", "versionEndExcluding": "17.0.22", "versionStartIncluding": "17.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6B0B496-BC41-4F9D-9A28-AE7664B5C77D", "versionEndExcluding": "17.2.16", "versionStartIncluding": "17.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "BC861E65-1682-4E99-8A7B-F4A31DDC0198", "versionEndExcluding": "17.4.8", "versionStartIncluding": "17.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "51DB90D6-C1C4-43B9-8B37-696CB361F37F", "versionEndExcluding": "17.6.3", "versionStartIncluding": "17.6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Visual Studio Information Disclosure Vulnerability"}], "id": "CVE-2023-33139", "lastModified": "2024-11-21T08:04:58.090", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "secure@microsoft.com", "type": "Secondary"}]}, "published": "2023-06-14T00:15:12.380", "references": [{"source": "secure@microsoft.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "secure@microsoft.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}