Microsoft Visual Studio 2022 vulnerabilities
128 known vulnerabilities affecting microsoft/visual_studio_2022.
Total CVEs
128
CISA KEV
2
actively exploited
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL7HIGH94MEDIUM27
Vulnerabilities
Page 5 of 7
CVE-2025-55240P3HIGHCVSS 7.3≥ 17.10.0, < 17.10.20≥ 17.12.0, < 17.12.13+1 more2025-10-14
CVE-2025-55240 [HIGH] CWE-284 CVE-2025-55240: Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-29117P3HIGHCVSS 7.5v17.0v17.12022-05-10
CVE-2022-29117 [HIGH] CWE-400 CVE-2022-29117: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2022-23267P3HIGHCVSS 7.5v17.0v17.12022-05-10
CVE-2022-23267 [HIGH] CVE-2022-23267: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2022-29145P3HIGHCVSS 7.5≥ 17.0, < 17.1.72022-05-10
CVE-2022-29145 [HIGH] CWE-400 CVE-2022-29145: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-43485P3HIGHCVSS 7.5≥ 17.6.0, < 17.6.20≥ 17.8.0, < 17.8.15+2 more2024-10-08
CVE-2024-43485 [HIGH] CWE-407 CVE-2024-43485: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-30105P3HIGHCVSS 7.5≥ 17.4.0, < 17.4.21≥ 17.6.0, < 17.6.17+2 more2024-07-09
CVE-2024-30105 [HIGH] CWE-400 CVE-2024-30105: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2026-85790P3MEDIUMCVSS 5.9≥ 17.14.0, < 17.14.422026-10-13
CVE-2026-85790 [MEDIUM] CWE-416 CVE-2026-85790: Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-38095P3HIGHCVSS 7.5≥ 17.4.0, < 17.4.21≥ 17.6.0, < 17.6.17+2 more2024-07-09
CVE-2024-38095 [HIGH] CWE-20 CVE-2024-38095: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-38168P3HIGHCVSS 7.5≥ 17.6.0, < 17.6.18≥ 17.8.0, < 17.8.13+1 more2024-08-13
CVE-2024-38168 [HIGH] CWE-400 CVE-2024-38168: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-43499P3HIGHCVSS 7.5≥ 17.6, < 17.6.21≥ 17.8, < 17.8.16+2 more2024-11-12
CVE-2024-43499 [HIGH] CWE-409 CVE-2024-43499: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2023-33128P3HIGHCVSS 7.3≥ 17.0, < 17.0.22≥ 17.2, < 17.2.16+2 more2023-06-14
CVE-2023-33128 [HIGH] CWE-416 CVE-2023-33128: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2023-33126P3HIGHCVSS 7.3≥ 17.0, < 17.0.22≥ 17.2, < 17.2.16+2 more2023-06-14
CVE-2023-33126 [HIGH] CVE-2023-33126: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2025-21206P3HIGHCVSS 7.3≥ 17.8, < 17.8.18≥ 17.10, < 17.10.11+1 more2025-02-11
CVE-2025-21206 [HIGH] CWE-427 CVE-2025-21206: Visual Studio Installer Elevation of Privilege Vulnerability
Visual Studio Installer Elevation of Privilege Vulnerability
nvd
CVE-2025-21405P3HIGHCVSS 7.3≥ 17.12.0, < 17.12.42025-01-14
CVE-2025-21405 [HIGH] CWE-284 CVE-2025-21405: Visual Studio Elevation of Privilege Vulnerability
Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2025-24998P3HIGHCVSS 7.3≥ 17.8.0, < 17.8.19≥ 17.10.0, < 17.10.12+2 more2025-03-11
CVE-2025-24998 [HIGH] CWE-427 CVE-2025-24998: Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privilege
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-25003P3HIGHCVSS 7.3≥ 17.8.0, < 17.8.19≥ 17.10.0, < 17.10.12+2 more2025-03-11
CVE-2025-25003 [HIGH] CWE-427 CVE-2025-25003: Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privilege
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69806P3HIGHCVSS 7.0≥ 17.14.0, < 17.14.402026-09-08
CVE-2026-69806 [HIGH] CWE-94 CVE-2026-69806: Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62902P3MEDIUMCVSS 6.5≥ 17.14.0, < 17.14.382026-08-11
CVE-2026-62902 [MEDIUM] CWE-693 CVE-2026-62902: Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2022-38013P3HIGHCVSS 7.5v17.0v17.2+1 more2022-09-13
CVE-2022-38013 [HIGH] CWE-400 CVE-2022-38013: .NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-21392P3HIGHCVSS 7.5≥ 17.4, < 17.4.17≥ 17.6, < 17.6.13+2 more2024-03-12
CVE-2024-21392 [HIGH] CWE-400 CVE-2024-21392: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd