Microsoft Visual Studio 2022 version 17.2

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical5high4medium0low

updated 2026-10-27

vulnerabilities (58)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-38180US	—OT critical	14.1% (97th)	KEV	17.2.18	2023-08-08	2 versions
CVE-2024-20656US	—	3.95% (90th)	Exploit	17.2.23	2024-01-09	3 versions
CVE-2022-41032US	high7.8	1.29% (70th)	Exploit	17.2.9	2022-10-11	2 versions
CVE-2023-38171US	—	71.0% (99th)	—	17.2.21	2023-10-10	2 versions
CVE-2023-36049US	critical9.8	6.79% (94th)	—	17.2.22	2023-11-14	2 versions
CVE-2022-30184US	medium4.3	5.70% (93rd)	—	17.2.4	2022-06-15	2 versions
CVE-2023-36799US	—	4.64% (92nd)	—	17.2.21	2023-09-12	2 versions
CVE-2022-38013US	—	4.04% (91st)	—	17.2.8	2022-09-13	2 versions
CVE-2024-21312US	—	3.58% (89th)	—	no fix	2024-01-09	—
CVE-2024-20672US	—	2.90% (87th)	—	no fix	2024-01-09	—
CVE-2024-21319US	—	2.89% (87th)	—	17.2.23	2024-01-09	3 versions
CVE-2024-0057US	critical9.8	2.78% (86th)	—	17.2.23	2024-01-09	3 versions
CVE-2023-36038US	high7.5	2.78% (86th)	—	17.2.22	2023-11-14	2 versions
CVE-2023-29331US	—	2.63% (85th)	—	17.2.16	2023-06-14	2 versions
CVE-2023-38178US	—	2.59% (85th)	—	17.2.18	2023-08-08	2 versions
CVE-2022-34716US	—	2.50% (85th)	—	17.2.7	2022-08-09	2 versions
CVE-2022-35827US	—	2.23% (83rd)	—	17.2.7	2022-08-09	2 versions
CVE-2022-35826US	—	2.23% (83rd)	—	17.2.7	2022-08-09	2 versions
CVE-2022-35825US	—	2.23% (83rd)	—	17.2.7	2022-08-09	2 versions
CVE-2022-35777US	—	2.10% (82nd)	—	17.2.7	2022-08-09	2 versions
CVE-2023-35390US	—	2.08% (81st)	—	17.2.18	2023-08-08	2 versions
CVE-2023-33170US	—	1.99% (81st)	—	17.2.17	2023-07-11	2 versions
CVE-2023-35391US	high7.5	1.90% (80th)	—	17.2.18	2023-08-08	2 versions
CVE-2023-33127US	—	1.88% (79th)	—	17.2.17	2023-07-11	2 versions
CVE-2023-36897US	medium6.5	1.68% (77th)	—	17.2.18	2023-08-08	2 versions
CVE-2023-24936US	—	1.56% (75th)	—	17.2.16	2023-06-14	2 versions
CVE-2023-28260US	—	1.54% (75th)	—	17.2.15	2023-04-11	2 versions
CVE-2023-36796US	—OT elevated	1.23% (69th)	—	17.2.21	2023-09-12	2 versions
CVE-2023-36794US	—OT elevated	1.23% (69th)	—	17.2.21	2023-09-12	2 versions
CVE-2023-36793US	—OT elevated	1.23% (69th)	—	17.2.21	2023-09-12	2 versions
CVE-2023-36792US	—OT elevated	1.23% (69th)	—	17.2.21	2023-09-12	2 versions
CVE-2022-41089US	high7.8	1.19% (68th)	—	17.2.11	2022-12-13	2 versions
CVE-2023-24897US	—	1.18% (68th)	—	17.2.16	2023-06-14	2 versions
CVE-2024-0056US	—OT elevated	1.18% (67th)	—	17.2.23	2024-01-09	2 versions
CVE-2023-21808US	—OT elevated	1.15% (67th)	—	17.2.13	2023-02-14	2 versions
CVE-2023-36558US	medium5.5	1.08% (65th)	—	17.2.22	2023-11-14	2 versions
CVE-2023-24895US	—	1.06% (64th)	—	17.2.16	2023-06-14	2 versions
CVE-2023-33135US	high7.3	1.00% (63rd)	—	17.2.16	2023-06-14	2 versions
CVE-2023-33128US	—	1.00% (63rd)	—	17.2.16	2023-06-14	2 versions
CVE-2023-33126US	—	1.00% (63rd)	—	17.2.16	2023-06-14	2 versions
CVE-2022-41119US	—	0.83% (57th)	—	17.2.10	2022-11-09	2 versions
CVE-2023-33139US	—	0.82% (57th)	—	17.2.16	2023-06-14	2 versions
CVE-2023-21567US	—	0.80% (56th)	—	17.2.13	2023-02-14	2 versions
CVE-2023-32028US	—	0.72% (54th)	—	17.2.23	2023-06-16	2 versions
CVE-2023-32026US	—	0.72% (54th)	—	17.2.23	2023-06-16	2 versions
CVE-2023-28296US	—	0.68% (52nd)	—	17.2.15	2023-04-11	2 versions
CVE-2023-32027US	—	0.60% (49th)	—	17.2.23	2023-06-16	2 versions
CVE-2023-32025US	—	0.60% (49th)	—	17.2.23	2023-06-16	2 versions
CVE-2023-29356US	—	0.60% (49th)	—	17.2.23	2023-06-16	2 versions
CVE-2023-29349US	—	0.60% (49th)	—	17.2.23	2023-06-16	2 versions

showing 50 of 58

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation45 CVEs
CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-122Heap-based Buffer Overflow8 CVEs
CWE-404Improper Resource Shutdown or Release8 CVEs
CWE-264CWE-2647 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)4 CVEs
CWE-311Missing Encryption of Sensitive Data4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs

sources (2)

Which sources assert this record, and when.

USMicrosoft MSRC (CSAF)56 CVEs
DECERT-Bund (BSI CSAF)5 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan