Microsoft Visual Studio 2022 vulnerabilities, page 2
155 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2022, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-29802microsoftmicrosoft visual studio 2022 version 17.10+3
EPSS score0.95%
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-24070ubuntudotnet6+67EPSS score1.01%
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.CVE-2025-24998microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+8EPSS score0.46%
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-49739microsoftmicrosoft visual studio 2015 update 3+10EPSS score0.95%
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.CVE-2025-32702microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+6EPSS score0.62%
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.CVE-2025-32703microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+8EPSS score0.50%
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.CVE-2025-30399chainguarddotnet-bootstrap-8+72EPSS score1.07%
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2020-36846alpinebrotli+160EPSS score0.63%
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.CVE-2022-21986fedoraprojectfedora+82EPSS score3.74%
.NET Denial of Service VulnerabilityCVE-2022-41119microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+7EPSS score0.83%
Visual Studio Remote Code Execution VulnerabilityCVE-2022-41032ubuntudotnet6+94EPSS score1.29%
NuGet Client Elevation of Privilege VulnerabilityCVE-2022-29145fedoraprojectfedora+22EPSS score5.43%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-29117fedoraprojectfedora+25EPSS score5.69%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-38013ubuntudotnet6+87EPSS score4.04%
.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2022-24512fedoraprojectfedora+130EPSS score1.61%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2022-24464fedoraprojectfedora+23EPSS score3.55%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-24767git_for_windows_projectgit_for_windows+9EPSS score1.49%
GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.CVE-2022-24513microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+9EPSS score0.78%
Visual Studio Elevation of Privilege VulnerabilityCVE-2022-30184fedoraprojectfedora+79EPSS score5.70%
.NET and Visual Studio Information Disclosure VulnerabilityCVE-2022-35827microsoftmicrosoft visual studio 2012 update 5+11EPSS score2.16%
Visual Studio Remote Code Execution Vulnerability