Vulnerabilities > Microsoft > Visual Studio 2022 > 17.8.6

DATE CVE VULNERABILITY TITLE RISK
2025-05-13 CVE-2025-32702 Command Injection vulnerability in Microsoft Visual Studio 2019
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.
local
low complexity
microsoft CWE-77
7.8
2025-05-13 CVE-2025-32703 Insufficient Granularity of Access Control vulnerability in Microsoft Visual Studio 2019
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
local
low complexity
microsoft CWE-1220
5.5
2025-02-11 CVE-2025-21206 Unspecified vulnerability in Microsoft Visual Studio 2019 and Visual Studio 2022
Visual Studio Installer Elevation of Privilege Vulnerability
local
low complexity
microsoft
7.3
2025-01-14 CVE-2025-21178 Unspecified vulnerability in Microsoft Visual Studio 2022
Visual Studio Remote Code Execution Vulnerability
network
low complexity
microsoft
8.8