CVE-2026-103572
Microsoft Visual Studio 2022 version 17.141/100
predicted likelihood
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
EPSS 0.008 (probability of exploitation) · CVSS base 8.8
Public PoC / Exploit
No public PoC/exploit references indexed yet. Newly-disclosed CVEs often have none — exploit publication lags disclosure.
References1
Mentions 2