Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-62214

No fix known EPSS 1%CVSS 6.7

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.

Published 2025-11-11 · CVE record · OSV

Products: Microsoft Visual Studio 2022 version 17.14