Advisories · Technology

Microsoft Visual Studio 2022 version 17.4.

Every CVE that names Microsoft Visual Studio 2022 version 17.4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-30052 CVE record

CVSS 4.7 Medium

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-693
Not analysed yet 11 Jun 2024
CVE-2024-29060 CVE record

CVSS 6.7 Medium

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2024-28938 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28937 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28935 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28934 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28933 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.9
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28930 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28936 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28932 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28931 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28929 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26190 CVE record

CVSS 7.5 High

Microsoft QUIC Denial of Service Vulnerability
- Microsoft Visual Studio 2022 version 17.9
- Microsoft Windows Server 2022
- Denial of service
Not analysed yet 12 Mar 2024
CVE-2024-21404 CVE record

CVSS 7.5 High

.NET Denial of Service Vulnerability
- Microsoft .NET 6.0
- Microsoft .NET 7.0
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-20656 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
- Path traversal
Not analysed yet 9 Jan 2024
CVE-2023-36038 CVE record

CVSS 8.2 High

ASP.NET Core Denial of Service Vulnerability
- Microsoft ASP.NET Core 8.0
- Microsoft Visual Studio 2022 version 17.2
- Denial of service
Not analysed yet 14 Nov 2023
CVE-2023-36759 CVE record

CVSS 6.7 Medium

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36897 CVE record

CVSS 8.1 High

Visual Studio Tools for Office Runtime Spoofing Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-29349 CVE record

CVSS 7.8 High

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
- Microsoft OLE DB Driver 18 for SQL Server
- Microsoft OLE DB Driver 19 for SQL Server
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32028 CVE record

CVSS 7.8 High

Microsoft SQL OLE DB Remote Code Execution Vulnerability
- Microsoft OLE DB Driver 19 for SQL Server
- Microsoft OLE DB Driver 18 for SQL Server
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32027 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Microsoft ODBC Driver 17 for SQL Server on Windows
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32026 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on MacOS
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32025 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Microsoft ODBC Driver 18 for SQL Server on MacOS
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-29356 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Microsoft ODBC Driver 18 for SQL Server on Linux
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-33135 CVE record

CVSS 7.3 High

.NET and Visual Studio Elevation of Privilege Vulnerability
- Microsoft .NET 6.0
- Microsoft .NET 7.0
Not analysed yet 13 Jun 2023
CVE-2023-32032 CVE record

CVSS 6.5 Medium

.NET and Visual Studio Elevation of Privilege Vulnerability
- Microsoft .NET 7.0
- Microsoft Visual Studio 2022 version 17.2
- CWE-20
Not analysed yet 13 Jun 2023
CVE-2023-33139 CVE record

CVSS 5.5 Medium

Visual Studio Information Disclosure Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-28299 CVE record

CVSS 5.5 Medium

Visual Studio Spoofing Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
Not analysed yet 11 Apr 2023
CVE-2023-28296 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28263 CVE record

CVSS 5.5 Medium

Visual Studio Information Disclosure Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-170
Not analysed yet 11 Apr 2023
CVE-2023-28262 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-23381 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2013 Update 5
- Microsoft Visual Studio 2015 Update 3
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21815 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2013 Update 5
- Microsoft Visual Studio 2015 Update 3
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21567 CVE record

CVSS 5.6 Medium

Visual Studio Denial of Service Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Path traversal
Not analysed yet 14 Feb 2023
CVE-2023-21566 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Path traversal
Not analysed yet 14 Feb 2023