CVE-2023-28262

HIGH 7.8CVE-2023-28262 · Published 11/04/2023 · updated 17/06/2026

In short

CVE-2023-28262 is a HIGH (CVSS 7.8) vulnerability affecting visual studio 2019 (microsoft), visual studio 2022 (microsoft).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.2% of all vulnerabilities.
Fix: update to 16.11.26, 17.0.21, 17.2.15, 17.4.7 or later.

Package	Affected versions	Patched versions
visual studio 2019 microsoft	`≥ 16.0, < 16.11.26`	`16.11.26`
visual studio 2022 microsoft	`≥ 17.0, < 17.0.21≥ 17.2, < 17.2.15≥ 17.4, < 17.4.7≥ 17.5, < 17.5.4`	`17.0.2117.2.1517.4.717.5.4`

Visual Studio Elevation of Privilege Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 16.0, < 16.11.26

16.11.26

≥ 17.0, < 17.0.21≥ 17.2, < 17.2.15≥ 17.4, < 17.4.7≥ 17.5, < 17.5.4

17.0.2117.2.1517.4.717.5.4

More vulnerabilities in visual studio 2019

See all →