Aller au contenu

Vulnérabilités de Microsoft Microsoft Visual Studio 2022 version 17.14

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-47304 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature… 8.1 Élevée 14 juil. 2026
CVE-2026-47302 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 Élevée 14 juil. 2026
CVE-2026-47300 Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges… 8.8 Élevée 14 juil. 2026
CVE-2026-32175 A tampering vulnerability exists when .NET Core improperly handles specially crafted files 4.3 Moyenne 12 mai 2026
CVE-2026-32177 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally 7.3 Élevée 12 mai 2026
CVE-2026-32203 Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network 7.5 Élevée 14 avr. 2026
CVE-2026-32178 Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network 7.5 Élevée 14 avr. 2026
CVE-2026-21256 Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual… 8.8 Élevée 10 févr. 2026
CVE-2026-21257 Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual… 8.0 Élevée 10 févr. 2026
CVE-2025-62214 Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an… 6.7 Moyenne 11 nov. 2025
CVE-2025-55248 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose… 4.8 Moyenne 14 oct. 2025
CVE-2025-55240 Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally 7.3 Élevée 14 oct. 2025
CVE-2025-55315 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized… 9.9 Critique 14 oct. 2025
CVE-2025-53773 Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual… 7.8 Élevée 12 août 2025
CVE-2025-49739 Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to… 8.8 Élevée 8 juil. 2025
CVE-2025-47959 Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an… 7.1 Élevée 13 juin 2025
CVE-2025-30399 Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network 7.5 Élevée 13 juin 2025

Autres produits Microsoft