CVE-20XX-?

Microsoft Visual Studio 2022 CVEs.

Published CVEs affecting Microsoft Visual Studio 2022, ranked by exploit odds.

22 CVEs · updated 2026-11-06 03:02 UTC

  1. CVE-2025-47959

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.

    Microsoft Visual Studio 2022

    7.1 HIGH 11% exploit odds Fix listed
  2. CVE-2025-53773

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.

    Microsoft Visual Studio 2022

    7.8 HIGH 3% exploit odds Fix listed
  3. CVE-2025-29804

    Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

    Microsoft Visual Studio 2022

    7.3 HIGH 1% exploit odds Fix listed
  4. CVE-2025-21173

    .NET Elevation of Privilege Vulnerability

    Microsoft Visual Studio 2022

    7.3 HIGH 1% exploit odds Fix listed
  5. CVE-2026-62901

    Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

    Other Microsoft Visual Studio 2022

    7.5 HIGH 1% exploit odds Fix listed
  6. CVE-2026-21256

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a network.

    Injection Microsoft Visual Studio 2022

    8.8 HIGH 1% exploit odds Fix listed
  7. CVE-2025-62214

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.

    Microsoft Visual Studio 2022

    6.7 MEDIUM 1% exploit odds Fix listed
  8. CVE-2025-30399

    Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

    Microsoft Visual Studio 2022

    7.5 HIGH 1% exploit odds Fix listed
  9. CVE-2026-62898

    Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

    Memory safety Microsoft Visual Studio 2022

    7.5 HIGH 1% exploit odds Fix listed
  10. CVE-2025-29802

    Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

    Microsoft Visual Studio 2022

    7.3 HIGH 1.0% exploit odds Fix listed
  11. CVE-2026-21257

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network.

    Injection Microsoft Visual Studio 2022

    8.0 HIGH 0.9% exploit odds Fix listed
  12. CVE-2026-62902

    Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

    Other Microsoft Visual Studio 2022

    6.5 MEDIUM 0.9% exploit odds Fix listed
  13. CVE-2026-71328

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft Visual Studio 2022

    8.8 HIGH 0.8% exploit odds Fix listed
  14. CVE-2026-62899

    Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

    Other Microsoft Visual Studio 2022

    5.9 MEDIUM 0.7% exploit odds Fix listed
  15. CVE-2026-62900

    Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

    Other Microsoft Visual Studio 2022

    5.9 MEDIUM 0.7% exploit odds Fix listed
  16. CVE-2026-32175

    A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.

    Disclosure Microsoft Visual Studio 2022

    4.3 MEDIUM 0.7% exploit odds Fix listed
  17. CVE-2026-32177

    Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

    Memory safety Microsoft Visual Studio 2022

    7.3 HIGH 0.6% exploit odds Fix listed
  18. CVE-2025-21405

    Visual Studio Elevation of Privilege Vulnerability

    Microsoft Visual Studio 2022

    7.3 HIGH 0.5% exploit odds Fix listed
  19. CVE-2026-62886

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

    Memory safety Microsoft Visual Studio 2022

    7.8 HIGH 0.5% exploit odds Fix listed
  20. CVE-2026-47305

    Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

    Code execution Microsoft Visual Studio 2022

    7.8 HIGH 0.5% exploit odds Fix listed
  21. CVE-2026-70354

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

    Memory safety Microsoft Visual Studio 2022

    7.8 HIGH 0.4% exploit odds Fix listed
  22. CVE-2026-62909

    Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

    Other Microsoft Visual Studio 2022

    7.8 HIGH 0.3% exploit odds Fix listed

All CVEs affecting Microsoft Visual Studio 2022 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.