CVE-2022-29148: Visual Studio Remote Code Execution Vulnerability
Published May 10, 2022
·Updated
Visual Studio Remote Code Execution Vulnerability.
Affected Software
2 affected componentsFixes available
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Microsoft Visual Studio 2017>=15.0<15.9.48
Remediation
Event History
May 10, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·08:34 PM
Data Sourced
via MITRE·08:34 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2022-29148?
CVE-2022-29148 is a Visual Studio Remote Code Execution Vulnerability.
2
Which version of Microsoft Visual Studio is affected by CVE-2022-29148?
Microsoft Visual Studio 2017 versions between 15.0 and 15.9.48 are affected.
3
What is the severity of CVE-2022-29148?
CVE-2022-29148 has a severity rating of 7.8 (high).
4
How can I fix CVE-2022-29148?
To fix CVE-2022-29148, you should upgrade your Microsoft Visual Studio 2017 to a version above 15.9.48.
5
Where can I find more information about CVE-2022-29148?
You can find more information about CVE-2022-29148 at the following link: [https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29148](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29148)