CVE-2025-47959

HIGH 7.1CVE-2025-47959 · Published 13/06/2025 · updated 17/06/2026

In short

CVE-2025-47959 is a HIGH (CVSS 7.1) vulnerability affecting visual studio 2022 (microsoft).
Chance of exploitation in the next 30 days (EPSS): 10.9%, higher than 95.9% of all vulnerabilities.
Fix: update to 17.10.16, 17.12.9, 17.14.5, 17.8.22 or later.

Package	Affected versions	Patched versions
visual studio 2022 microsoft	`≥ 17.10.0, < 17.10.16≥ 17.12.0, < 17.12.9≥ 17.14.0, < 17.14.5≥ 17.8.0, < 17.8.22`	`17.10.1617.12.917.14.517.8.22`

Description

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47959 · Vendor Advisory

More vulnerabilities in visual studio 2022

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

visual studio 2022

microsoft

≥ 17.10.0, < 17.10.16≥ 17.12.0, < 17.12.9≥ 17.14.0, < 17.14.5≥ 17.8.0, < 17.8.22

17.10.1617.12.917.14.517.8.22

More vulnerabilities in visual studio 2022

See all →