Microsoft Visual Studio 2022 Version 17.12 vulnerabilities, page 2
41 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2022 Version 17.12, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-32703microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+8
EPSS score0.50%
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.CVE-2025-30399chainguarddotnet-bootstrap-8+72EPSS score1.07%
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-47305microsoftmicrosoft visual studio 2022 version 17.12+4EPSS score0.47%
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.CVE-2026-47303ubuntudotnet10+13EPSS score0.84%
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-47300ubuntudotnet10+13EPSS score0.78%
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-47304chainguardaspnet-8-targeting-pack+42EPSS score0.29%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-47302chainguardaspnet-8-targeting-pack+48EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-32178chainguarddotnet-bootstrap-8+27EPSS score2.09%
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.CVE-2026-32203ubuntudotnet10+14EPSS score2.44%
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.CVE-2026-32177ubuntudotnet7+16EPSS score0.57%
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-32175ubuntudotnet7+13EPSS score0.64%
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.
The security update fixes the vulnerability by ensuring .NET Core properly handles files.CVE-2026-50524chainguarddotnet-bootstrap-8+28EPSS score1.23%
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50648chainguardaspnet-8-targeting-pack+36EPSS score1.17%
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50651chainguarddotnet-bootstrap-8+28EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-50650ubuntudotnet7+16EPSS score0.46%
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVE-2026-50646ubuntudotnet7+18EPSS score4.02%
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.CVE-2026-50527chainguarddotnet-bootstrap-8+26EPSS score1.17%
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50659chainguarddotnet-bootstrap-8+36EPSS score0.74%
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.CVE-2026-50525chainguardaspnet-8-targeting-pack+37EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-50528chainguarddotnet-bootstrap-8+28EPSS score0.61%
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.