VS
Product
Visual Studio 2022
On CISA KEVExploited in the wild
156
CVEs
2
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 7High 116Medium 33Low 0
Watch
Add Visual Studio 2022 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20656 | 7.8 | Jan 9 | Visual Studio Elevation of Privilege Vulnerability Affected: 17.2 before 17.2.23; 17.4 before 17.4.15; 17.6 before 17.6.11 |
| CVE-2023-36796 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 17.2 before 17.2.19; 17.4 before 17.4.11; 17.7 before 17.7.4 |
| CVE-2023-36794 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 17.2 before 17.2.19; 17.4 before 17.4.11; 17.7 before 17.7.4 |
| CVE-2023-36793 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 17.2 before 17.2.19; 17.4 before 17.4.11; 17.7 before 17.7.4 |
| CVE-2023-36792 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 17.2 before 17.2.19; 17.4 before 17.4.11; 17.7 before 17.7.4 |
| CVE-2023-35390 | 7.8 | Aug 8 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.18; 17.4.0 before 17.4.10; 17.6.0 before 17.6.6 |
| CVE-2023-24897 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 17.0 before 17.0.22; 17.2 before 17.2.16; 17.4 before 17.4.8; 17.6 before 17.6.3 |
| CVE-2023-24895 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 17.0 before 17.0.22; 17.2 before 17.2.16; 17.4 before 17.4.8; 17.6 before 17.6.3 |
| CVE-2023-28296 | 7.8 | Apr 11 | Visual Studio Remote Code Execution Vulnerability Affected: 17.0 before 17.0.21; 17.2.0 before 17.2.15; 17.4.0 before 17.4.7; 17.5.0 before 17.5.4 |
| CVE-2023-28262 | 7.8 | Apr 11 | Visual Studio Elevation of Privilege Vulnerability Affected: 17.0 before 17.0.21; 17.2 before 17.2.15; 17.4 before 17.4.7; 17.5 before 17.5.4 |
| CVE-2023-28260 | 7.8 | Apr 11 | .NET DLL Hijacking Remote Code Execution Vulnerability Affected: 17.0 before 17.0.21; 17.2 before 17.2.15; 17.4 before 17.4.7; 17.5 before 17.5.4 |
| CVE-2023-23381 | 7.8 | Feb 14 | Visual Studio Remote Code Execution Vulnerability Affected: 17.0 before 17.0.19; 17.2 before 17.2.13; 17.4 before 17.4.5 |
| CVE-2023-21815 | 7.8 | Feb 14 | Visual Studio Remote Code Execution Vulnerability Affected: 17.0 before 17.0.19; 17.2 before 17.2.13; 17.4 before 17.4.5 |
| CVE-2023-21808 | 7.8 | Feb 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 17.0; 17.2; 17.4 |
| CVE-2023-21566 | 7.8 | Feb 14 | Visual Studio Elevation of Privilege Vulnerability Affected: 17.0 before 17.0.19; 17.2 before 17.2.13; 17.4 before 17.4.5 |
| CVE-2022-41119 | 7.8 | Nov 9 | Visual Studio Remote Code Execution Vulnerability Affected: 17.0; 17.2; 17.3 |
| CVE-2022-41032 | 7.8 | Oct 11 | NuGet Client Elevation of Privilege Vulnerability Affected: 17.0 before 17.0.15; 17.2.0 before 17.2.9; 17.3 before 17.3.6; 17.3 before 17.3.7 |
| CVE-2022-24513 | 7.8 | Apr 15 | Visual Studio Elevation of Privilege Vulnerability Affected: 17.0 before 17.0.3; 17.0 before 17.0.12; 17.1 before 17.1.7 |
| CVE-2022-24767 | 7.8 | Apr 12 | GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account Affected: 17.0 before 17.0.8; 17.1.0 before 17.1.4 |
| CVE-2026-62898 | 7.5 | Aug 11 | Microsoft QUIC Information Disclosure Vulnerability Affected: 17.14.0 before 17.14.38 |
| CVE-2026-62901 | 7.5 | Aug 11 | .NET Denial of Service Vulnerability Affected: 17.14.0 before 17.14.38 |
| CVE-2026-50651 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 17.12.0 before 17.12.22; 17.14.0 before 17.14.36 |
| CVE-2026-50648 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 17.12.0 before 17.12.22; 17.14.0 before 17.14.36 |
| CVE-2026-50527 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 17.12.0 before 17.12.22; 17.14.0 before 17.14.36 |
| CVE-2026-50525 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 17.12.0 before 17.12.22; 17.14.0 before 17.14.36 |
| CVE-2026-50524 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 17.12.0 before 17.12.22; 17.14.0 before 17.14.36 |
| CVE-2026-47302 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 17.12.0 before 17.12.22; 17.14.0 before 17.14.36 |
| CVE-2026-32203 | 7.5 | Apr 14 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.12.0 before 17.12.19; 17.14.0 before 17.14.30 |
| CVE-2026-32178 | 7.5 | Apr 14 | .NET Spoofing Vulnerability Affected: 17.12.0 before 17.12.19; 17.14.0 before 17.14.30 |
| CVE-2025-30399 | 7.5 | Jun 13 | Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network Affected: 17.8.0 before 17.8.22; 17.10.0 before 17.10.16; 17.12.0 before 17.12.9; 17.14.0 before 17.14.5 |
| CVE-2025-26682 | 7.5 | Apr 8 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network Affected: 17.8.0 before 17.8.20; 17.10.0 before 17.10.13; 17.12.0 before 17.12.7; 17.13.0 before 17.13.6 |
| CVE-2025-21172 | 7.5 | Jan 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 17.6.0 before 17.6.22; 17.8.0 before 17.8.17; 17.10.0 before 17.10.10; 17.12.0 before 17.12.4 |
| CVE-2025-21171 | 7.5 | Jan 14 | .NET Remote Code Execution Vulnerability Affected: 17.6.0 before 17.6.22; 17.8.0 before 17.8.17; 17.10.0 before 17.10.10; 17.12.0 before 17.12.4 |
| CVE-2024-43499 | 7.5 | Nov 12 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.6 before 17.6.21; 17.8 before 17.8.16; 17.10.0 through 17.10.9; 17.11.0 before 17.11.6 |
| CVE-2024-43485 | 7.5 | Oct 8 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.6.0 before 17.6.20; 17.8.0 before 17.8.15; 17.10.0 before 17.10.8; 17.11.0 before 17.11.5 |
| CVE-2024-43484 | 7.5 | Oct 8 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 17.6 before 17.6.20; 17.8 before 17.8.15; 17.10 before 17.10.8; 17.11 before 17.11.5 |
| CVE-2024-43483 | 7.5 | Oct 8 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 17.6 before 17.6.20; 17.8 before 17.8.15; 17.10 before 17.10.8; 17.11 before 17.11.5 |
| CVE-2024-38168 | 7.5 | Aug 13 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.6.0 before 17.6.18; 17.8.0 before 17.8.13; 17.10.0 before 17.10.6 |
| CVE-2024-38095 | 7.5 | Jul 9 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.4.0 before 17.4.21; 17.6.0 before 17.6.17; 17.8.0 before 17.8.12; 17.10.0 before 17.10.4 |
| CVE-2024-30105 | 7.5 | Jul 9 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.4.0 before 17.4.21; 17.6.0 before 17.6.17; 17.8.0 through 17.8.12; 17.10.0 through 17.10.4 |
| CVE-2024-26190 | 7.5 | Mar 12 | Microsoft QUIC Denial of Service Vulnerability Affected: 17.4.0 before 17.4.17; 17.6.0 before 17.6.13; 17.8.0 before 17.8.8; 17.9.0 before 17.9.3 |
| CVE-2024-21392 | 7.5 | Mar 12 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.4 before 17.4.17; 17.6 before 17.6.13; 17.8 before 17.8.8; 17.9 before 17.9.3 |
| CVE-2024-21404 | 7.5 | Feb 13 | .NET Denial of Service Vulnerability Affected: 17.4.0 before 17.4.16; 17.6.0 before 17.6.12; 17.8.0 before 17.8.7 |
| CVE-2024-21386 | 7.5 | Feb 13 | .NET Denial of Service Vulnerability Affected: 17.4.0 before 17.4.16; 17.6.0 before 17.6.12; 17.8.0 before 17.8.7 |
| CVE-2023-36038 | 7.5 | Nov 14 | ASP.NET Core Denial of Service Vulnerability Affected: 17.2 before 17.2.22; 17.4 before 17.4.14; 17.6 before 17.6.10; 17.7 before 17.7.7 |
| CVE-2023-38171 | 7.5 | Oct 10 | Microsoft QUIC Denial of Service Vulnerability Affected: 17.2.0 before 17.2.20; 17.4.0 before 17.4.12; 17.6.0 before 17.6.8; 17.7.0 before 17.7.5 |
| CVE-2023-35391 | 7.5 | Aug 8 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability Affected: 17.2.0 before 17.2.18; 17.4.0 before 17.4.10; 17.6.0 before 17.6.6 |
| CVE-2023-38178 | 7.5 | Aug 8 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 17.2.0 before 17.2.18; 17.4.0 before 17.4.10 |
| CVE-2022-38013 | 7.5 | Sep 13 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 17.0; 17.2; 17.3; 17.3 |
| CVE-2022-29145 | 7.5 | May 10 | .NET and Visual Studio Denial of Service Vulnerability Affected: 17.0 before 17.1.7 |