Visual Studio Remote Code Execution Vulnerability
Weakness
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Visual_studio_2019 | Microsoft | 15.0 (including) | 15.9.63 (excluding) |
| Visual_studio_2019 | Microsoft | 16.0 (including) | 16.11.37 (including) |
| Visual_studio_2022 | Microsoft | 17.4 (including) | 17.4.20 (excluding) |
| Visual_studio_2022 | Microsoft | 17.6 (including) | 17.6.16 (excluding) |
| Visual_studio_2022 | Microsoft | 17.8 (including) | 17.8.11 (excluding) |
| Visual_studio_2022 | Microsoft | 17.10 (including) | 17.10.2 (excluding) |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/1.html
- https://cwe.mitre.org/data/definitions/107.html
- https://cwe.mitre.org/data/definitions/127.html
- https://cwe.mitre.org/data/definitions/17.html
- https://cwe.mitre.org/data/definitions/20.html
- https://cwe.mitre.org/data/definitions/22.html
- https://cwe.mitre.org/data/definitions/237.html
- https://cwe.mitre.org/data/definitions/36.html
- https://cwe.mitre.org/data/definitions/477.html
- https://cwe.mitre.org/data/definitions/480.html
- https://cwe.mitre.org/data/definitions/51.html
- https://cwe.mitre.org/data/definitions/57.html
- https://cwe.mitre.org/data/definitions/59.html
- https://cwe.mitre.org/data/definitions/65.html
- https://cwe.mitre.org/data/definitions/668.html
- https://cwe.mitre.org/data/definitions/74.html
- https://cwe.mitre.org/data/definitions/87.html