Advisories · Technology
Microsoft Visual Studio 2022 version 17.14.
Every CVE that names Microsoft Visual Studio 2022 version 17.14 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
Visual Studio Spoofing Vulnerability
- Microsoft Visual Studio 2017 version 15.9
- Microsoft Visual Studio 2019 version 16.11
- Weak cryptography or TLS
- CVSS 7.5 High
ASP.NET Core Denial of Service Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.10
- Denial of service
- CVSS 8.8 High
.NET and Visual Studio Elevation of Privilege Vulnerability
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 3.5 AND 4.7.2
- Memory corruption
- CVSS 8.8 High
.NET Security Feature Bypass Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Weak cryptography or TLS
- CVSS 6.5 Medium
.NET Security Feature Bypass Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- CWE-346
- CVSS 7.5 High
.NET Remote Code Execution Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 8.0 runtime
- CWE-829
- CVSS 7.3 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Path traversal
- CVSS 6.7 Medium
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Path traversal
- CVSS 7.3 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Path traversal
- CVSS 8.8 High
Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.10
- Code injection
- CVSS 7.0 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Code injection
- Information disclosure
- CVSS 6.5 Medium
.NET Information Disclosure Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- CWE-346
- CVSS 7.5 High
.NET Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.9
- Path traversal
- Information disclosure
- CVSS 7.8 High
Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.12
- Microsoft Visual Studio 2022 version 17.14
- CWE-693
- CVSS 7.3 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0
- Microsoft .NET 8.0
- Memory corruption
- CWE-20
- CVSS 8.8 High
GitHub Copilot and Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.3
- Command injection
- Code injection
- CVSS 8.0 High
GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.3
- Command injection
- CVSS 6.7 Medium
Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Command injection
- CVSS 7.3 High
Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Broken access control
- CVSS 7.8 High
GitHub Copilot and Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.14
- Command injection
- CVSS 8.8 High
Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Path traversal
- CVSS 7.1 HighCritical · CVSS 7+ and EPSS
Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.10
- Microsoft Visual Studio 2022 version 17.12
- Command injection