Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-62214

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.

Published

2025-11-11T18:15:48.760

Last Modified

2025-11-17T17:40:51.857

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft visual_studio_2022 < 17.14.17 Yes
References