Known vulnerabilities in Visual Studio 2022 version 17.6

Vendor: Microsoft

Software: Visual Studio

Version: 2022 version 17.6

Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 44

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (44)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU102784 - Out-of-bounds read CVE-2025-21176	CWE-125	High	No	No	-	15.01.2025	SB2025011536 SB2025011647 SB2025011671 and 6 more
#VU100407 - Improper Access Control CVE-2024-49044	CWE-284	Medium	No	No	-	12.11.2024	SB20241112162
#VU100397 - Unchecked Input for Loop Condition CVE-2024-43499	CWE-606	Medium	No	No	-	12.11.2024	SB20241112149 SB2024111302 SB2024111344 and 2 more
#VU100396 - Type confusion CVE-2024-43498	CWE-843	High	No	No	-	12.11.2024	SB20241112149 SB2024111302 SB2024111344 and 2 more
#VU98277 - Inefficient Algorithmic Complexity CVE-2024-43484	CWE-407	Medium	No	No	-	09.10.2024	SB2024100939 SB2024100946 SB2024100978 and 10 more
#VU98276 - Inefficient Algorithmic Complexity CVE-2024-43483	CWE-407	Medium	No	No	-	09.10.2024	SB2024100939 SB2024100946 SB2024100978 and 11 more
#VU98269 - Improper Access Control CVE-2024-43590	CWE-284	Low	No	No	-	09.10.2024	SB2024100929
#VU98267 - Inefficient Algorithmic Complexity CVE-2024-43485	CWE-407	Medium	No	No	-	09.10.2024	SB2024100927 SB2024100946 SB2024100978 and 12 more
#VU98266 - Use After Free CVE-2024-38229	CWE-416	High	No	No	-	09.10.2024	SB2024100927 SB2024100946 SB20241009101 and 3 more
#VU98255 - Improper Link Resolution Before File Access ('Link Following') CVE-2024-43603	CWE-59	Low	No	No	-	09.10.2024	SB2024100919
#VU95921 - Resource exhaustion CVE-2024-38168	CWE-400	Medium	No	No	-	13.08.2024	SB20240813112
#VU95920 - Cleartext Transmission of Sensitive Information CVE-2024-38167	CWE-319	Medium	No	No	-	13.08.2024	SB20240813112 SB2024081402 SB2024081804 and 2 more
#VU94058 - Improper Link Resolution Before File Access ('Link Following') CVE-2024-38081	CWE-59	Low	No	No	-	10.07.2024	SB2024071013 SB2025060327
#VU94043 - Resource exhaustion CVE-2024-30105	CWE-400	Medium	No	No	-	10.07.2024	SB2024071003 SB2024071025 SB2024071055 and 5 more
#VU94042 - Improper input validation CVE-2024-38095	CWE-20	Medium	No	No	-	10.07.2024	SB2024071002 SB2024071025 SB2024071055 and 5 more
#VU94041 - Use After Free CVE-2024-35264	CWE-416	High	No	No	-	10.07.2024	SB2024071002 SB2024071025 SB2024071055 and 3 more
#VU91762 - Incorrect Permission Assignment for Critical Resource CVE-2024-29187	CWE-732	Low	No	No	-	11.06.2024	SB20240611276 SB20240611278
#VU89490 - Improper Control of Generation of Code ('Code Injection') CVE-2024-32004	CWE-94	High	No	No	-	15.05.2024	SB2024051503 SB2024060720 SB2024060721 and 51 more
#VU89436 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-30046	CWE-362	Medium	No	No	-	14.05.2024	SB2024051437 SB2024051712 SB2024061134 and 3 more
#VU89431 - Heap-based Buffer Overflow CVE-2024-30045	CWE-122	High	No	No	-	14.05.2024	SB2024051434 SB2024051712 SB2024061134 and 4 more

Showing elements 1 - 20 out of 44

Known vulnerabilities in Visual Studio 2022 version 17.6

Vulnerabilities by Severity

Vulnerabilities (44)

Please verify you're human