# Microsoft Visual Studio 2022


- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2023-38180](https://insights.sbomify.com/CVE-2023-38180/): Microsoft .NET Core and Visual Studio Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2025-55315](https://insights.sbomify.com/CVE-2025-55315/): ASP.NET Security Feature Bypass Vulnerability (critical 9.9)
- [CVE-2024-43498](https://insights.sbomify.com/CVE-2024-43498/): .NET and Visual Studio Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-88092](https://insights.sbomify.com/CVE-2026-88092/): ASP.NET Core Tampering Vulnerability (critical 9.4)
- [CVE-2024-0057](https://insights.sbomify.com/CVE-2024-0057/): NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (critical 9.1)
- [CVE-2026-96957](https://insights.sbomify.com/CVE-2026-96957/): .NET Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2026-69439](https://insights.sbomify.com/CVE-2026-69439/): .NET and Visual Studio Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-71328](https://insights.sbomify.com/CVE-2026-71328/): .NET and Visual Studio Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-47300](https://insights.sbomify.com/CVE-2026-47300/): ASP.NET Core Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-47303](https://insights.sbomify.com/CVE-2026-47303/): ASP.NET Core Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-21256](https://insights.sbomify.com/CVE-2026-21256/): GitHub Copilot and Visual Studio Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/visual-studio-2022/