Microsoft Visual Studio 2022
Moderate fix1 remedy
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*, +2 more
Moderate fix1 remedy
Microsoft Visual Studio Command Injection Vulnerability Leading to Remote Code Execution
Vulnerability
Patched
A command injection vulnerability has been identified in Microsoft Visual Studio 2022 version 17.14. This vulnerability allows an authorized attacker to execute code locally by improperly neutralizing special elements used in commands. Exploitation requires multiple steps, including prompt injection, interaction with the Copilot Agent, and triggering a build.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected system.
Remediation
Users can download the security update for Microsoft Visual Studio 2022 version 17.14 from the Visual Studio Download Center.
Added: Nov 11, 2025, 6:52 PM
Updated: Nov 11, 2025, 6:52 PM
Vulnerability Rating
Custom Algorithm
spread
7.8impact
7.5exploitability
2.9remediation
7.7relevance
1.0threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.