Microsoft Visual Studio 2022 17.8

productDE

cpe:/a:microsoft:visual_studio_2022:17.8

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical0high0medium0low

updated 2026-10-27

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-47962US	—	1.57% (75th)	Exploit	no fix	2025-06-10	—
CVE-2025-47959US	—	10.9% (96th)	—	no fix	2025-06-13	—
CVE-2024-50338US	—	3.17% (88th)	—	no fix	2025-01-14	—
CVE-2024-30105US	—	2.94% (87th)	—	no fix	2024-07-09	—
CVE-2024-38095US	—	2.74% (86th)	—	no fix	2024-07-09	—
CVE-2024-35264US	—	2.56% (85th)	—	no fix	2024-07-09	—
CVE-2025-21176US	—	2.38% (84th)	—	no fix	2025-01-14	—
CVE-2025-21172US	—	1.84% (79th)	—	no fix	2025-01-14	—
CVE-2025-29813US	critical9.8	1.77% (78th)	—	no fix	2025-05-08	—
CVE-2025-21171US	—	1.72% (77th)	—	no fix	2025-01-14	—
CVE-2024-30046US	—	1.69% (77th)	—	no fix	2024-05-14	—
CVE-2025-21178US	—	1.60% (76th)	—	no fix	2025-01-14	—
CVE-2024-38081US	—	1.30% (70th)	—	no fix	2024-07-09	—
CVE-2025-21173US	—	1.30% (70th)	—	no fix	2025-01-14	—
CVE-2025-26646US	—	1.27% (70th)	—	no fix	2025-05-13	—
CVE-2024-30045US	—	1.25% (69th)	—	no fix	2024-05-14	—
CVE-2025-30399US	—	1.07% (65th)	—	no fix	2025-06-13	—
CVE-2025-24070US	—	1.01% (63rd)	—	no fix	2025-03-11	—
CVE-2025-24043US	—	0.91% (60th)	—	no fix	2025-03-11	—
CVE-2025-21264US	—	0.79% (56th)	—	no fix	2025-05-13	—
CVE-2025-32702US	—	0.62% (49th)	—	no fix	2025-05-13	—
CVE-2025-26631US	—	0.57% (47th)	—	no fix	2025-03-11	—
CVE-2025-21405US	—	0.55% (45th)	—	no fix	2025-01-14	—
CVE-2025-32703US	—	0.50% (43rd)	—	no fix	2025-05-13	—
CVE-2025-25003US	—	0.46% (39th)	—	no fix	2025-03-11	—
CVE-2025-24998US	—	0.46% (39th)	—	no fix	2025-03-11	—

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow4 CVEs
CWE-427Uncontrolled Search Path Element3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.