Microsoft Visual Studio 2022 version 17.2 vulnerabilities

Product

Microsoft Visual Studio 2022 version 17.2

by Microsoft · last CVE Jan 9, 2024

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities28 In the news0 Timeline

Severity mix

Critical 2High 20Medium 6Low 0

Severity

All severities28 Critical2 High20 Medium6 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Microsoft Visual Studio 2022 version 17.2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-38180 In wildKEV	7.5	14%	Aug 8	.NET and Visual Studio Denial of Service Vulnerability Affected: 17.2.0 before 17.2.18
CVE-2022-35827	8.8	2%	Aug 9	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.7
CVE-2022-35826	8.8	2%	Aug 9	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.7
CVE-2022-35825	8.8	2%	Aug 9	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.7
CVE-2022-35777	8.8	2%	Aug 9	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.7
CVE-2024-0056	8.7	1%	Jan 9	Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability Affected: 17.2.0 before 17.2.23
CVE-2023-33170	8.1	2%	Jul 11	ASP.NET and Visual Studio Security Feature Bypass Vulnerability Affected: 17.2.0 before 17.2.17
CVE-2023-33127	8.1	2%	Jul 11	.NET and Visual Studio Elevation of Privilege Vulnerability Affected: 17.2.0 before 17.2.17
CVE-2024-20656	7.8	4%	Jan 9	Visual Studio Elevation of Privilege Vulnerability Affected: 17.2.0 before 17.2.23
CVE-2023-36792	7.8	1%	Sep 12	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.21
CVE-2023-36793	7.8	1%	Sep 12	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.21
CVE-2023-36794	7.8	1%	Sep 12	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.21
CVE-2023-36796	7.8	1%	Sep 12	Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.21
CVE-2023-35390	7.8	2%	Aug 8	.NET and Visual Studio Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.18
CVE-2023-32028	7.8	1%	Jun 16	Microsoft SQL OLE DB Remote Code Execution Vulnerability Affected: 17.2.0 before 17.2.23
CVE-2022-41032	7.8	1%	Oct 11	NuGet Client Elevation of Privilege Vulnerability Affected: 17.2.0 before 17.2.9
CVE-2023-36038	7.5	3%	Nov 14	ASP.NET Core Denial of Service Vulnerability Affected: 17.2.0 before 17.2.22
CVE-2023-38171	7.5	71%	Oct 10	Microsoft QUIC Denial of Service Vulnerability Affected: 17.2.0 before 17.2.21
CVE-2023-35391	7.5	2%	Aug 8	ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability Affected: 17.2.0 before 17.2.18
CVE-2023-38178	7.5	3%	Aug 8	.NET Core and Visual Studio Denial of Service Vulnerability Affected: 17.2.0 before 17.2.18