Microsoft Visual Studio 2022

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Microsoft Visual Studio 2022.

By the Year

In 2025 there have been 8 vulnerabilities in Microsoft Visual Studio 2022 with an average score of 7.4 out of ten. Last year, in 2024 Visual Studio 2022 had 38 security vulnerabilities published. Right now, Visual Studio 2022 is on track to have less security vulnerabilities in 2025 than it did last year. Last year, the average CVE base score was greater by 0.39

Year	Vulnerabilities	Average Score
2025	8	7.38
2024	38	7.77
2023	37	7.33
2022	16	7.70
2021	1	8.80
2020	1	6.50
2019	0	0.00
2018	0	0.00

It may take a day or so for new Visual Studio 2022 vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Microsoft Visual Studio 2022 Security Vulnerabilities

Insufficient granularity of access control in Visual Studio

CVE-2025-32703 5.5 - Medium - May 13, 2025

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

Information Disclosure

Improper neutralization of special elements used in a command ('command injection') in Visual Studio

CVE-2025-32702 7.8 - High - May 13, 2025

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.

Command Injection

Visual Studio Installer Elevation of Privilege Vulnerability

CVE-2025-21206 7.3 - High - February 11, 2025

Visual Studio Installer Elevation of Privilege Vulnerability

DLL preloading

Visual Studio Elevation of Privilege Vulnerability

CVE-2025-21405 7.3 - High - January 14, 2025

Visual Studio Elevation of Privilege Vulnerability

Authorization

Visual Studio Remote Code Execution Vulnerability

CVE-2025-21178 8.8 - High - January 14, 2025

Visual Studio Remote Code Execution Vulnerability

Out-of-bounds Read

.NET Elevation of Privilege Vulnerability

CVE-2025-21173 7.3 - High - January 14, 2025

.NET Elevation of Privilege Vulnerability

Creation of Temporary File in Directory with Insecure Permissions

.NET and Visual Studio Remote Code Execution Vulnerability

CVE-2025-21172 7.5 - High - January 14, 2025

.NET and Visual Studio Remote Code Execution Vulnerability

Integer Overflow or Wraparound

.NET Remote Code Execution Vulnerability

CVE-2025-21171 7.5 - High - January 14, 2025

.NET Remote Code Execution Vulnerability

Heap-based Buffer Overflow

Visual Studio Elevation of Privilege Vulnerability

CVE-2024-49044 6.7 - Medium - November 12, 2024

Visual Studio Elevation of Privilege Vulnerability

Authorization

.NET and Visual Studio Denial of Service Vulnerability

CVE-2024-43499 7.5 - High - November 12, 2024

.NET and Visual Studio Denial of Service Vulnerability

Data Amplification

.NET and Visual Studio Remote Code Execution Vulnerability

CVE-2024-43498 9.8 - Critical - November 12, 2024

.NET and Visual Studio Remote Code Execution Vulnerability

Object Type Confusion

.NET and Visual Studio Remote Code Execution Vulnerability

CVE-2024-38229 8.1 - High - October 08, 2024

.NET and Visual Studio Remote Code Execution Vulnerability

Dangling pointer

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

CVE-2024-43590 7.8 - High - October 08, 2024

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Authorization

Visual Studio Collector Service Denial of Service Vulnerability

CVE-2024-43603 5.5 - Medium - October 08, 2024

Visual Studio Collector Service Denial of Service Vulnerability

insecure temporary file

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2024-43484 7.5 - High - October 08, 2024

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Inefficient Algorithmic Complexity

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVE-2024-43483 7.5 - High - October 08, 2024

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Inefficient Algorithmic Complexity

.NET and Visual Studio Denial of Service Vulnerability

CVE-2024-43485 7.5 - High - October 08, 2024

.NET and Visual Studio Denial of Service Vulnerability

Inefficient Algorithmic Complexity

.NET and Visual Studio Denial of Service Vulnerability

CVE-2024-38168 7.5 - High - August 13, 2024

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Information Disclosure Vulnerability

CVE-2024-38167 6.5 - Medium - August 13, 2024

.NET and Visual Studio Information Disclosure Vulnerability

Cleartext Transmission of Sensitive Information

.NET and Visual Studio Denial of Service Vulnerability

CVE-2024-38095 7.5 - High - July 09, 2024

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

CVE-2024-35264 8.1 - High - July 09, 2024

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

CVE-2024-30105 7.5 - High - July 09, 2024

.NET and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2024-38081 7.3 - High - July 09, 2024

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Visual Studio Remote Code Execution Vulnerability

CVE-2024-30052 4.7 - Medium - June 11, 2024

Visual Studio Remote Code Execution Vulnerability

Visual Studio Elevation of Privilege Vulnerability

CVE-2024-29060 6.7 - Medium - June 11, 2024

Visual Studio Elevation of Privilege Vulnerability

Visual Studio Denial of Service Vulnerability

CVE-2024-30046 - May 14, 2024

Visual Studio Denial of Service Vulnerability

Race Condition

.NET and Visual Studio Remote Code Execution Vulnerability

CVE-2024-30045 6.3 - Medium - May 14, 2024

.NET and Visual Studio Remote Code Execution Vulnerability