Medium severity6.7NVD Advisory· Published Nov 11, 2025· Updated Jun 17, 2026
CVE-2025-62214
CVE-2025-62214
Description
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.
Affected products
3cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*+ 1 more
- cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*range: >=17.14.0,<17.14.17
- (no CPE)
- Microsoft/Microsoft Visual Studio 2022 version 17.14v5Range: 17.14.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62214nvdVendor Advisory
News mentions
0No linked articles in our index yet.