Microsoft Microsoft Visual Studio 2022 version 17.8
62 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-49739 | | Visual Studio Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2025-47959 | 17.8.0 – < 17.8.22 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.1 | 11 % | ||
| CVE-2025-30399 | | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.5 | 1.1 % | ||
| CVE-2025-26646 | | .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability | HIGH 8.0 | 1.3 % | ||
| CVE-2025-32702 | 17.8.0 – < 17.8.21 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2025-32703 | | Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2025-26682 | | ASP.NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 1.7 % | ||
| CVE-2025-29804 | 17.8.0 – < 17.8.20 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2025-29802 | 17.8.0 – < 17.8.20 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 0.9 % | ||
| CVE-2025-25003 | 17.8.0 – < 17.8.19 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 0.5 % | ||
| CVE-2025-24998 | | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 0.5 % | ||
| CVE-2025-24070 | | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.0 | 1.0 % | ||
| CVE-2025-21206 | 17.8.0 – < 17.8.18 | Visual Studio Installer Elevation of Privilege Vulnerability | HIGH 7.3 | 0.7 % | ||
| CVE-2025-21172 | | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.5 | 1.8 % | ||
| CVE-2025-21173 | | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2025-21178 | | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2025-21176 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2025-21171 | 17.8.0 – < 17.8.17 | .NET Remote Code Execution Vulnerability | HIGH 7.5 | 1.7 % | ||
| CVE-2024-43498 | 17.8.0 – < 17.8.16 | .NET and Visual Studio Remote Code Execution Vulnerability | CRITICAL 9.8 | 3.6 % | ||
| CVE-2024-49044 | 17.8.0 – < 17.8.16 | Visual Studio Elevation of Privilege Vulnerability | MEDIUM 6.7 | 0.8 % | ||
| CVE-2024-43499 | 17.8.0 – < 17.8.16 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.6 % | ||
| CVE-2024-43603 | | Visual Studio Collector Service Denial of Service Vulnerability | MEDIUM 5.5 | 0.8 % | ||
| CVE-2024-43590 | | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2024-43485 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2024-43484 | | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.0 % | ||
| CVE-2024-43483 | | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-38229 | 17.8.0 – < 17.8.15 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 8.1 | 2.1 % | ||
| CVE-2024-38168 | 17.8.0 – < 17.8.13 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-38167 | 17.8.0 – < 17.8.13 | .NET and Visual Studio Information Disclosure Vulnerability | MEDIUM 6.5 | 1.4 % | ||
| CVE-2024-38095 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-38081 | 17.8.0 – < 17.8.12 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2024-35272 | 17.8.0 – < 17.8.14 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-30105 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-35264 | 17.8.0 – < 17.8.12 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 8.1 | 2.6 % | ||
| CVE-2024-30052 | | Visual Studio Remote Code Execution Vulnerability | MEDIUM 4.7 | 1.4 % | ||
| CVE-2024-29060 | | Visual Studio Elevation of Privilege Vulnerability | MEDIUM 6.7 | 0.9 % | ||
| CVE-2024-30046 | | Visual Studio Denial of Service Vulnerability | MEDIUM 5.9 | 1.7 % | ||
| CVE-2024-30045 | | .NET and Visual Studio Remote Code Execution Vulnerability | MEDIUM 6.3 | 1.2 % | ||
| CVE-2024-28938 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.3 % | ||
| CVE-2024-28937 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.3 % | ||
| CVE-2024-28935 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-28934 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-28933 | 17.8.0 – < 17.8.9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-28930 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-28936 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-28932 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-28931 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-28929 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-21409 | 17.8.0 – < 17.8.9 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 2.5 % | ||
| CVE-2024-26190 | | Microsoft QUIC Denial of Service Vulnerability | HIGH 7.5 | 3.0 % | ||
| CVE-2024-21392 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2024-21404 | | .NET Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-21386 | | .NET Denial of Service Vulnerability | HIGH 7.5 | 2.4 % | ||
| CVE-2024-21319 | 17.8.0 – < 17.8.4 | Microsoft Identity Denial of service vulnerability | MEDIUM 6.8 | 2.9 % | ||
| CVE-2024-0057 | | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability | CRITICAL 9.8 | 2.8 % | ||
| CVE-2024-0056 | | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability | HIGH 8.7 | 1.2 % | ||
| CVE-2023-29349 | | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2023-32028 | | Microsoft SQL OLE DB Remote Code Execution Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2023-32027 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2023-32026 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2023-32025 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2023-29356 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % |