Software update: Visual Studio 2022 17.7.4

Microsoft has released version 17.7.4 of Visual Studio 2022, a version with extended support. This popular programming development environment has useful options to make programming in Visual C++, Visual Basic, C#, F# and Python easier. The new version is fully 64bit and has a new simplified user interface. More information about version 17.7 is available this page from Microsoft. The changelog for version 17.7.4 looks like this:

Summary of What’s New in this Release of Visual Studio 2022 version 17.7.4

• Updated version of Git used by Visual Studio to v 2.41.0.3.
• Fixed a crash while applying changes with hot reload on a decompiled module.
• Ensures the security of the VS Installer Elevation Service by adding quotes to the path, preventing process hijacking along the path.

Developer Community

• Code Lens TypeScript/JavaScript references animation
• System.Windows.Extensions types are not supported on platform .NET6 with Studio Version 17.6.5
• Visual Studio not asserting for 0xC0000005: Access violation

Security Advisories Addressed

• CVE-2023-36799: A vulnerability exists in .NET where reading a maliciously crafted X.509 certificate may result in Denial of Service. This issue only affects Linux systems.
• CVE-2023-36796: This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.
• CVE-2023-36794: This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.
• CVE-2023-36793: This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.
• CVE-2023-36792: This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.
• CVE-2023-36759: This security update removes pgodriver.sys, where reading a malicious file can lead to Elevation of Privilege.
• CVE-2023-36758: This security update addresses a vulnerability in VSInstallerElevationService when running a malicious executable which can lead to Elevatio of Privilege.