GCVE - cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visual Studio 2022 (`aa0f2ec8-b994-5650-a953-8796e160aeb5`)
Edition	*
Language	*
Software edition	*
Target software	-
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-32203`	vulnerable	2026-06-08 07:57:17.130324	.NET and Visual Studio Denial of Service Vulnerability HIGH (7.5) Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. Published: 2026-04-14T16:58:38.178Z Updated: 2026-07-15T01:08:25.314Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32203	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-21257`	vulnerable	2026-06-08 07:49:14.619006	GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability HIGH (8) Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network. Published: 2026-02-10T17:51:37.741Z Updated: 2026-05-11T21:25:38.855Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21257	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-21256`	vulnerable	2026-06-08 07:49:14.618436	GitHub Copilot and Visual Studio Remote Code Execution Vulnerability HIGH (8.8) Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a network. Published: 2026-02-10T17:51:38.364Z Updated: 2026-05-11T21:25:39.432Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21256	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-62214`	vulnerable	2026-06-08 07:37:28.865433	Visual Studio Remote Code Execution Vulnerability MEDIUM (6.7) Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally. Published: 2025-11-11T17:59:47.547Z Updated: 2026-02-26T16:57:17.674Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62214	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36897`	vulnerable	2026-06-08 06:08:14.517720	Visual Studio Tools for Office Runtime Spoofing Vulnerability HIGH (8.1) Visual Studio Tools for Office Runtime Spoofing Vulnerability Published: 2023-08-08T17:08:53.174Z Updated: 2025-01-01T01:59:12.128Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-35390`	vulnerable	2026-06-08 06:06:27.312898	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-28299`	vulnerable	2026-06-08 06:01:10.255857	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-28296`	vulnerable	2026-06-08 06:01:10.252107	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41032`	vulnerable	2026-06-08 05:48:29.264880	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.