CVE-2022-24512: .NET and Visual Studio Remote Code Execution Vulnerability

Why are Confidentiality, Integrity, and Availability rated as low in CVSS?

While we cannot rule out the impact to Confidentiality, Integrity, and Availability, the ability to exploit this vulnerability by itself is limited. An attacker would need to combine this with other vulnerabilities to perform an attack.