CVE-2026-103572PATCHED

microsoft · microsoft visual studio 2022 version

Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Description

Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

Affected Products

Vendor	Product	Versions
microsoft	microsoft visual studio 2022 version	17.14.0, 18.10.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572(vendor-advisory, patch)

Related News (2 articles)

Tier C

VulDB2h ago

CVE-2026-103572 | Microsoft SQL Server/Visual Studio 17.14/18.10 code injection

→ No new info (linked only)

Tier A

Microsoft MSRC7h ago

CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.8 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CISA KEV❌ No

Actively exploited❌ No

Patch available

17.14.4218.10.4

CWECWE-94

PublishedOct 13, 2026

Trending Score38

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV

Windows Shell Security Feature Bypass Vulnerability

Trending: 132

HIGHCVE-2026-85880EXPKEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Trending: 82

HIGHCVE-2026-81963EXPKEV

Windows Update Stack Elevation of Privilege Vulnerability

Trending: 81

CRITICALCVE-2026-88131

Microsoft Dataverse Remote Code Execution Vulnerability

Trending: 64

CRITICALCVE-2026-77900

Azure App Service Remote Code Execution Vulnerability

Trending: 64

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Oct 13, 2026

Discovered by ZDM

Oct 13, 2026

Patch Available

Oct 13, 2026