CVE-2022-35825: Visual Studio Remote Code Execution Vulnerability Visual Studio Remote Code Execution Vulnerability

high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EPSS

1.85%

76.9th percentile

Visual Studio Remote Code Execution Vulnerability Visual Studio Remote Code Execution Vulnerability

Affected

16 ranges

Vendor	Product	Version range	Fixed in
microsoft	microsoft_visual_studio_2012_update_5	>= 11.0.0 < 11.0.61252.0	11.0.61252.0
microsoft	microsoft_visual_studio_2013_update_5	>= 12.0.0 < 12.0.40699.0	12.0.40699.0
microsoft	microsoft_visual_studio_2015_update_3	>= 14.0.0 < 14.0.27552.0	14.0.27552.0
microsoft	microsoft_visual_studio_2017_version_15.9	>= 15.9.0 < 15.9.50	15.9.50
microsoft	microsoft_visual_studio_2019_version_16.11	>= 16.11.0 < 16.11.18	16.11.18
microsoft	microsoft_visual_studio_2019_version_16.9	>= 15.0.0 < 16.9.24	16.9.24
microsoft	microsoft_visual_studio_2022_version_17.0	>= 17.0.0 < 17.0.13	17.0.13
microsoft	microsoft_visual_studio_2022_version_17.2	>= 17.2.0 < 17.2.7	17.2.7
msrc	microsoft_visual_studio_2012_update_5	—	—
msrc	microsoft_visual_studio_2013_update_5	—	—
msrc	microsoft_visual_studio_2015_update_3	—	—
msrc	microsoft_visual_studio_2017_version_15.9	—	—
msrc	microsoft_visual_studio_2019_version_16.11	—	—
msrc	microsoft_visual_studio_2019_version_16.9	—	—
msrc	microsoft_visual_studio_2022_version_17.0	—	—
msrc	microsoft_visual_studio_2022_version_17.2	—	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvelistv58.8HIGH

vendor_msrc8.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.