QID 91881

Date Published: 2022-04-13

QID 91881: Microsoft Visual Studio Security Update for April 2022

Microsoft has released security Updates for Visual Studio which resolves Remote Code Execution and Denial of Service vulnerability.

Affected Software:
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 - 16.6)
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft Visual Studio 2017 Version 17.0
Microsoft Visual Studio 2017 Version 17.1
and Microsoft VIsual Studio for Mac prior to 8.10.22.11

QID Detection Logic: Authenticated
This QID detects vulnerable versions of Microsoft Visual Studio by checking the file version of the Visual Studio.

Microsoft Visual Studio is prone to Elevation of Privilege Vulnerabilities

CVSS V3 rated as High - 7.8 severity.

CVSS V2 rated as High - 7.2 severity.

Solution

Customers are advised to refer to CVE-2022-24765, CVE-2022-24513 and CVE-2022-24767 for more information pertaining to these vulnerabilities.

Vendor References

CVE-2022-24513 - msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24513
CVE-2022-24765 - msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24765
CVE-2022-24767 - msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24767

CVEs related to QID 91881

CVE-2022-24765 | CVE-2022-24513 | CVE-2022-24767 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2022-24513			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24513
CVE-2022-24765			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24765
CVE-2022-24767			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24767

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].