First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-35826

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Visual Studio Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	>= 15.9.0, < 15.9.50
Microsoft	Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)	>= 15.0.0, < 16.9.24
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	>= 16.11.0, < 16.11.18
Microsoft	Microsoft Visual Studio 2022 version 17.0	>= 17.0.0, < 17.0.13
Microsoft	Microsoft Visual Studio 2012 Update 5	>= 11.0.0, < 11.0.61252.0
Microsoft	Microsoft Visual Studio 2013 Update 5	>= 12.0.0, < 12.0.40699.0
Microsoft	Microsoft Visual Studio 2015 Update 3	>= 14.0.0, < 14.0.27552.0
Microsoft	Microsoft Visual Studio 2022 version 17.2	>= 17.2.0, < 17.2.7

References

Timeline

Published: Aug 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-358278.8Visual Studio Remote Code Execution Vulnerability CVE-2022-358287.8Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability CVE-2022-358294.8Service Fabric Explorer Spoofing Vulnerability CVE-2022-35839.8A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unkn CVE-2022-358308.1Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2022-358315.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2022-358325.5Windows Event Tracing Denial of Service Vulnerability CVE-2022-358337.5Windows Secure Channel Denial of Service Vulnerability CVE-2022-358348.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2022-358358.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2022-358368.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2022-358376.5Windows Graphics Component Information Disclosure Vulnerability

CVE-2022-35826: High severity, CVSS 8.8 | Vulnix