Microsoft Microsoft Visual Studio 2022 version 17.0
40 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-33170 | 17.0.0 – < 17.0.23 | ASP.NET and Visual Studio Security Feature Bypass Vulnerability | HIGH 8.1 | 2.0 % | ||
| CVE-2023-33127 | 17.0.0 – < 17.0.23 | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH 8.1 | 1.9 % | ||
| CVE-2023-29331 | 17.0.0 – < 17.0.22 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.6 % | ||
| CVE-2023-24936 | 17.0.0 – < 17.0.22 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.5 | 1.6 % | ||
| CVE-2023-24895 | 17.0.0 – < 17.0.22 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-24897 | 17.0.0 – < 17.0.22 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-33135 | 17.0.0 – < 17.0.22 | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.0 % | ||
| CVE-2023-33128 | 17.0.0 – < 17.0.22 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 1.0 % | ||
| CVE-2023-33126 | 17.0.0 – < 17.0.22 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 1.0 % | ||
| CVE-2023-32032 | 17.0.0 – < 17.0.22 | .NET and Visual Studio Elevation of Privilege Vulnerability | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-33139 | 17.0.0 – < 17.0.22 | Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 0.8 % | ||
| CVE-2023-28299 | 17.0.0 – < 17.0.21 | Visual Studio Spoofing Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-28296 | 17.0.0 – < 17.0.21 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2023-28263 | 17.0.0 – < 17.0.21 | Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 0.6 % | ||
| CVE-2023-28262 | 17.0.0 – < 17.0.21 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2023-28260 | | .NET DLL Hijacking Remote Code Execution Vulnerability | HIGH 7.8 | 1.5 % | ||
| CVE-2023-23381 | 17.0.0 – < 17.0.19 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2023-21815 | 17.0.0 – < 17.0.19 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2023-21808 | | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-21567 | 17.0.0 – < 17.0.19 | Visual Studio Denial of Service Vulnerability | MEDIUM 5.6 | 0.8 % | ||
| CVE-2023-21566 | 17.0.0 – < 17.0.19 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2022-41089 | 17.0.0 – < 17.0.17 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2022-41119 | 17.0.0 – < 17.0.16 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2022-41032 | | NuGet Client Elevation of Privilege Vulnerability | HIGH 7.8 | 1.3 % | ||
| CVE-2022-38013 | | .NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 4.0 % | ||
| CVE-2022-35827 | 17.0.0 – < 17.0.13 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35826 | 17.0.0 – < 17.0.13 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35825 | 17.0.0 – < 17.0.13 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35777 | 17.0.0 – < 17.0.13 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.1 % | ||
| CVE-2022-34716 | 17.0.0 – < 17.0.13 | .NET Spoofing Vulnerability | MEDIUM 5.9 | 2.5 % | ||
| CVE-2022-30184 | | .NET and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 5.7 % | ||
| CVE-2022-29145 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.5 % | ||
| CVE-2022-29117 | 17.0.0 – < 17.0.10 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.7 % | ||
| CVE-2022-23267 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.7 % | ||
| CVE-2022-24513 | | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2022-24767 | | GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account. | HIGH 7.8 | 1.5 % | ||
| CVE-2022-24512 | 17.0.0 – < 17.0.7 | .NET and Visual Studio Remote Code Execution Vulnerability | MEDIUM 6.3 | 1.6 % | ||
| CVE-2022-24464 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2022-21986 | 17.0.0 – < 17.0.6 | .NET Denial of Service Vulnerability | HIGH 7.5 | 3.7 % | ||
| CVE-2021-43877 | 17.0.0 – < 17.0.3 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | HIGH 8.8 | 0.7 % |