VS
Product
Visual Studio 2022
On CISA KEVExploited in the wild
156
CVEs
2
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 7High 116Medium 33Low 0
Watch
Add Visual Studio 2022 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55315 | 9.9 | Oct 14 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network Affected: 17.10.0 before 17.10.20; 17.12.10 before 17.12.13; 17.14.0 before 17.14.17 |
| CVE-2026-47304 | 9.8 | Jul 14 | .NET Security Feature Bypass Vulnerability Affected: 17.12.0 before 17.12.22; 17.14.0 before 17.14.36 |
| CVE-2024-43498 | 9.8 | Nov 12 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 17.6 before 17.6.21; 17.8 before 17.8.16; 17.10.0 before 17.10.9; 17.11.0 before 17.11.6 |
| CVE-2024-0057 | 9.8 | Jan 9 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability Affected: 17.2 before 17.2.23; 17.4 before 17.4.15; 17.6 before 17.6.11; 17.8 before 17.8.4 |
| CVE-2023-36049 | 9.8 | Nov 14 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 17.2 before 17.2.22; 17.4 before 17.4.14; 17.6 before 17.6.10; 17.7 before 17.7.7 |
| CVE-2023-36758 | 9.8 | Sep 12 | Visual Studio Elevation of Privilege Vulnerability Affected: 17.7 through 17.7.4 |
| CVE-2026-88092 | 9.4 | Oct 13 | ASP.NET Core Tampering Vulnerability Affected: 17.14.0 before 17.14.42 |
Showing 7