CVE-2025-62214: Microsoft Visual Studio 2022

Medium severity, CVSS 6.7. EPSS: 1% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.

Affected products

• Microsoft Visual Studio 2022: from 17.14.0, before 17.14.17 (fixed in 17.14.17)

Published 2025-11-11. Last modified 2026-06-17.