CVE-2025-47959

No fix known EPSS 11%CVSS 7.1

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.

Published 2025-06-13 · CVE record · OSV

Products: Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2022 version 17.8