Microsoft Visual Studio 2022 Version 17.4 vulnerabilities

70 known vulnerabilities affecting microsoft/microsoft_visual_studio_2022_version_17.4.

Total CVEs
70
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH54MEDIUM14

Vulnerabilities

Page 3 of 4
CVE-2023-35390HIGHCVSS 7.8≥ 17.4.0, < 17.4.102023-08-08
CVE-2023-35390 [HIGH] CWE-77 CVE-2023-35390: .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-36897MEDIUMCVSS 6.5≥ 17.4.0, < 17.4.102023-08-08
CVE-2023-36897 [HIGH] CWE-20 CVE-2023-36897: Visual Studio Tools for Office Runtime Spoofing Vulnerability Visual Studio Tools for Office Runtime Spoofing Vulnerability
cvelistv5nvd
CVE-2023-33170HIGHCVSS 8.1≥ 17.4.0, < 17.4.92023-07-11
CVE-2023-33170 [HIGH] CWE-362 CVE-2023-33170: ASP.NET and Visual Studio Security Feature Bypass Vulnerability ASP.NET and Visual Studio Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2023-33127HIGHCVSS 8.1≥ 17.4.0, < 17.4.92023-07-11
CVE-2023-33127 [HIGH] CWE-1220 CVE-2023-33127: .NET and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-29356HIGHCVSS 7.8≥ 17.4.0, < 17.4.152023-06-16
CVE-2023-29356 [HIGH] CWE-416 CVE-2023-29356: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-32027HIGHCVSS 7.8≥ 17.4.0, < 17.4.152023-06-16
CVE-2023-32027 [HIGH] CWE-122 CVE-2023-32027: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-32025HIGHCVSS 7.8≥ 17.4.0, < 17.4.152023-06-16
CVE-2023-32025 [HIGH] CWE-122 CVE-2023-32025: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-32026HIGHCVSS 7.8≥ 17.4.0, < 17.4.152023-06-16
CVE-2023-32026 [HIGH] CWE-122 CVE-2023-32026: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-32028HIGHCVSS 7.8≥ 17.4.0, < 17.4.152023-06-16
CVE-2023-32028 [HIGH] CWE-122 CVE-2023-32028: Microsoft SQL OLE DB Remote Code Execution Vulnerability Microsoft SQL OLE DB Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-29349HIGHCVSS 7.8≥ 17.4.0, < 17.4.152023-06-16
CVE-2023-29349 [HIGH] CWE-191 CVE-2023-29349: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-33128HIGHCVSS 7.3≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-33128 [HIGH] CWE-416 CVE-2023-33128: .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-24897HIGHCVSS 7.8≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-24897 [HIGH] CWE-122 CVE-2023-24897: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-33135HIGHCVSS 7.3≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-33135 [HIGH] CVE-2023-33135: .NET and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-24936HIGHCVSS 7.5≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-24936 [HIGH] CVE-2023-24936: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-33126HIGHCVSS 7.3≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-33126 [HIGH] CVE-2023-33126: .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-24895HIGHCVSS 7.8≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-24895 [HIGH] CVE-2023-24895: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-29331HIGHCVSS 7.5≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-29331 [HIGH] CWE-400 CVE-2023-29331: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
cvelistv5nvd
CVE-2023-33139MEDIUMCVSS 5.5≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-33139 [MEDIUM] CWE-125 CVE-2023-33139: Visual Studio Information Disclosure Vulnerability Visual Studio Information Disclosure Vulnerability
cvelistv5nvd
CVE-2023-32032MEDIUMCVSS 6.5≥ 17.4.0, < 17.4.82023-06-14
CVE-2023-32032 [MEDIUM] CWE-20 CVE-2023-32032: .NET and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2023-28260HIGHCVSS 7.8≥ 17.4.0, < 17.4.72023-04-11
CVE-2023-28260 [HIGH] CVE-2023-28260: .NET DLL Hijacking Remote Code Execution Vulnerability .NET DLL Hijacking Remote Code Execution Vulnerability
cvelistv5nvd