Microsoft Visual Studio 2022 Version 17.13 vulnerabilities

8 vulnerabilities

Known vulnerabilities in Microsoft Visual Studio 2022 Version 17.13, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8CVE-2025-26646chainguarddotnet-8+66
EPSS score
1.27%
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.7.5CVE-2025-26682ubuntudotnet6+11
EPSS score
1.71%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.7.3CVE-2025-25003microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+6
EPSS score
0.46%
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.7.3CVE-2025-29804microsoftmicrosoft visual studio 2022 version 17.10+4
EPSS score
1.29%
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.7CVE-2025-24070ubuntudotnet6+67
EPSS score
1.01%
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.7.3CVE-2025-24998microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+8
EPSS score
0.46%
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.7.8CVE-2025-32702microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+6
EPSS score
0.62%
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.5.5CVE-2025-32703microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+8
EPSS score
0.50%
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.