8.8Yüksek

CVE-2025-21178Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2015 Update 3; Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio … Yayım: (1 yıl önce)

Açıklama

Visual Studio Remote Code Execution Vulnerability

Zayıflık türü (CWE): CWE-122CWE-125

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Microsoft Microsoft Visual Studio 2015 Update 3 14.0.0 – < 14.0.24252.2
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) 15.9.0 – < 15.9.69
Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11.0 – < 16.11.43
Microsoft Microsoft Visual Studio 2022 version 17.10 17.10.0 – < 17.10.10
Microsoft Microsoft Visual Studio 2022 version 17.12 17.12.0 – < 17.12.4
Microsoft Microsoft Visual Studio 2022 version 17.6 17.6.0 – < 17.6.22
Microsoft Microsoft Visual Studio 2022 version 17.8 17.8.0 – < 17.8.17
microsoft visual studio 2015 14.0.0 – < 14.0.24252.2
microsoft visual studio 2017 15.9.0 – < 15.9.69
microsoft visual studio 2019 16.11.0 – < 16.11.43
microsoft visual studio 2022 17.6.0 – < 17.6.22

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (6)

  • cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:* ≥ 15.0 < 15.9.69
  • cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:-:*:* ≥ 16.0 < 16.11.43
  • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* ≥ 17.6.0 < 17.6.22
  • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* ≥ 17.8.0 < 17.8.17
  • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* ≥ 17.10.0 < 17.10.10
  • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* ≥ 17.12.0 < 17.12.4