References https://nvd.nist.gov/vuln/detail/CVE-2022-35827 https://www.cve.org/CVERecord?id=CVE-2022-35827 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35827 https://www.sentinelone.com/vulnerability-database/cve-2022-35827/ https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.2 https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-the-remote-code-execution-vulnerability-in-microsoft-visual-studio-2013-update-5-august-9-2022-kb5016315-ed838b43-88b6-41b0-b048-f6f47e8e5c00 https://github.com/advisories/GHSA-9mv4-wx25-qqc9 https://learn.microsoft.com/zh-cn/visualstudio/releases/2022/release-notes-v17.2 https://www.rapid7.com/blog/post/2022/08/09/patch-tuesday-august-2022/
Related Vulnerabilities北京中科聚网一体化运营平台 /manage/tplresource/importVisualModuleImg 文件上传漏洞时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞PoCCVE-2025-25296: Label Studio < 1.16.0 - Cross-Site ScriptingPoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSSLabel Studio存在XSS漏洞(CVE-2025-25296)PoCsupabase-studio-exposure: Supabase Studio - ExposurePoCCVE-2024-14015: Studiocart <= 2.9.0 - Cross-Site ScriptingPoCvscode-settings: Visual Studio Code Settings - Credential ExposurePoCvscode-mcp-json: Visual Studio Code MCP Configuration ("mcp.json") ExposurePoCvscode-slnx-sqlite-disclosure: Visual Studio Code - Slnx.SQLite File DisclosureCherry Studio 未授权 代码注入漏洞Sim Studio AI 服务端请求伪造漏洞(CVE-2025-9805)