CVE-2023-36897: Microsoft 365 Apps

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Visual Studio Tools for Office Runtime Spoofing Vulnerability

Affected products

• Microsoft 365 Apps: affected versions not specified
• Microsoft Office: version 2019 only
• Microsoft Office Long Term Servicing Channel: version 2021 only
• Microsoft Visual Studio 2010 Tools For Office Runtime: affected versions not specified
• Microsoft Visual Studio 2017: from 15.0, before 15.9.56 (fixed in 15.9.56)
• Microsoft Visual Studio 2019: from 16.0, before 16.11.29 (fixed in 16.11.29)
• Microsoft Visual Studio 2022: from 17.2.0, before 17.2.18 (fixed in 17.2.18); from 17.4.0, before 17.4.10 (fixed in 17.4.10); from 17.6.0, before 17.6.6 (fixed in 17.6.6)

Published 2023-08-08. Last modified 2026-08-10.