Microsoft Visual Studio 2022 version 17.12 vulnerabilities

4 known vulnerabilities in Microsoft Visual Studio 2022 version 17.12 from Microsoft. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  ASP.NET Core 2.3: Inconsistent Interpretation of HTTP Requests

  CVE-2025-55315Oct 14, 2025MicrosoftEPSS 67.2%

  Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

• 7.1 High severity

  Microsoft Visual Studio 2022 version 17.10: Improper Neutralization of Special Elements used in a Command

  CVE-2025-47959Jun 13, 2025MicrosoftEPSS 11.4%

  Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.

• 8.0 High severity

  .NET 8.0: External Control of File Name or Path

  CVE-2025-26646May 13, 2025MicrosoftEPSS 1.29%

  External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.

• 7.8 High severity

  Microsoft Visual Studio 2019 version 16.11…: Improper Neutralization of Special Elements used in a Command

  CVE-2025-32702May 13, 2025Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.