CVE-2022-35825
Published: 09 August 2022
Summary
CVE-2022-35825 is a high-severity an unspecified weakness vulnerability in Microsoft Visual Studio. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 12.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-35825 is a remote code execution vulnerability in Visual Studio that received a CVSS 3.1 score of 8.8. The flaw permits an attacker to execute arbitrary code on an affected system when certain conditions are met.
An unauthenticated remote attacker can trigger the issue by supplying a malicious input that a Visual Studio user opens or interacts with, resulting in full compromise of confidentiality, integrity, and availability on the target workstation.
Microsoft security updates and mitigation guidance are published in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35825.
The associated EPSS score rose from a low baseline to a peak of 0.0669 on 2025-01-22 before receding to the current value of 0.0326, indicating that exploitation interest emerged after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-38698
Vulnerability details
Visual Studio Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.