Skip to contentMicrosoft Visual Studio vulnerabilities
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +2 more +4 moreA tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive...CVE-2019-1351Public exploitFix available7.5 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +1 more +3 moreA remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes...CVE-2019-1350Fix availableEPSS 25.7%8.8 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +1 more +3 moreA remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes...CVE-2019-1352Fix availableEPSS 24.0%8.8 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +1 more +3 moreA remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes...CVE-2019-1349Fix availableEPSS 34.0%8.8 High
- microsoft visual studio 2017, visual studio 2019 +1 moreAn elevation of privilege vulnerability exists when Visual Studio fails to properly validate...CVE-2019-14256.5 Medium
- microsoft visual studio, visual studio 2017, visual studio 2019 +9 more +11 moreAn elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector...CVE-2019-12327.8 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.0 +2 more +4 moreGit for Visual Studio Elevation of Privilege VulnerabilityCVE-2019-12117.3 High
- microsoft .net framework, .net framework 2.0, .net framework 3.0 +42 more +44 moreA remote code execution vulnerability exists in .NET software when the software fails to check...CVE-2019-11138.8 High
- microsoft visual studioAn information disclosure vulnerability exists when Visual Studio improperly parses XML input in...CVE-2019-10796.5 Medium
- microsoft visual studio 2017, visual studio 2019 +1 moreAn elevation of privilege vulnerability exists when the Visual Studio updater service improperly...CVE-2019-10775.0 Medium
- microsoft visual studio, visual studio 2017, visual studio 2019 +9 more +11 moreAn elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the...CVE-2019-07277.8 High
- microsoft visual studio 2017A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer...CVE-2019-0809EPSS 10.6%7.8 High
- microsoft nuget, .net core sdk, visual studio +6 more +8 moreA tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow...CVE-2019-0757Fix available6.5 Medium
- microsoft visual studio codeA remote code execution vulnerability exists in Visual Studio Code when it process environment...CVE-2019-0728EPSS 27.7%7.8 High
- microsoft .net framework, visual studio, .net core +14 more +16 moreImproper Input Validation in .Net Framework API'sCVE-2019-0657Fix available5.9 Medium
- microsoft .net framework, visual studio, .net framework 2.0 +12 more +14 moreA remote code execution vulnerability exists in .NET Framework and Visual Studio software when...CVE-2019-0613EPSS 15.4%8.8 High
- microsoft visual studio, visual studio 2017 +1 moreA remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly...CVE-2019-0546EPSS 16.2%7.8 High
- microsoft visual studioAn information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary...CVE-2019-05375.5 Medium
- microsoft visual studio, windows 10, windows 10 servers +3 more +5 moreAn elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector...CVE-2018-85997.8 High
- microsoft visual studio, windows 10, windows 10 servers +3 more +5 moreAn Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows...CVE-2018-0952Public exploit7.8 High
- microsoft visual studio, visual studio 2017 +1 moreA Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka ...CVE-2018-82327.8 High
- microsoft expression blend 4, expression blend, visual studio +1 more +3 moreA remote code execution vulnerability exists in Visual Studio software when the software does not...CVE-2018-8172Public exploitEPSS 33.7%7.8 High
- microsoft the installer of visual studio code, visual studio code +1 moreUntrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to...CVE-2018-05977.8 High
- microsoft the installer of visual studio community, visual studio community +1 moreUntrusted search path vulnerability in the installer of Visual Studio Community allows an...CVE-2018-05967.8 High
- microsoft visual studio, visual studio 2017 +1 moreAn information disclosure vulnerability exists when Visual Studio improperly discloses limited...CVE-2018-10374.3 Medium
- microsoft visual studio, debug interface access software development kit +1 moremsdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual...CVE-2014-3802EPSS 10.9%6.8 Medium
- microsoft asp.net signalr, visual studio team foundation server +1 moreCross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0...CVE-2013-5042EPSS 11.7%4.3 Medium
- microsoft .net framework, lync, office +11 more +13 moreMicrosoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0;...CVE-2013-3129EPSS 32.4%9.3 High
- microsoft visual studio team foundation serverCross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010...CVE-2012-1892EPSS 16.5%4.3 Medium
- microsoft visual studioUntrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1...CVE-2012-00086.9 Medium
- microsoft report viewer, visual studio +1 moreCross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio...CVE-2011-1976Public exploitEPSS 20.8%4.3 Medium
- microsoft sql server, sql server management studio express, visual studio +1 more +3 moreThe XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1,...CVE-2011-1280EPSS 15.3%4.3 Medium
- microsoft visual studio, visual studio .net, apple itunes +1 more +3 moreUntrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft...CVE-2010-31909.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreInteger overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP...CVE-2009-3126EPSS 23.5%9.3 High
- microsoft office, .net framework, excel viewer +23 more +25 moreGDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property...CVE-2009-2528EPSS 20.5%9.3 High
- microsoft .net framework, excel viewer, expression web +23 more +25 moreMultiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET...CVE-2009-2504EPSS 21.0%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreGDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2009-2503EPSS 22.2%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreBuffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP...CVE-2009-2502EPSS 22.0%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreHeap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3,...CVE-2009-2501EPSS 26.7%9.3 High
- microsoft excel viewer, expression web, forefront client security +23 more +25 moreInteger overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP...CVE-2009-2500EPSS 23.6%9.3 High
- microsoft office, office web components, biztalk server +2 more +4 moreHeap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP...CVE-2009-2496EPSS 29.5%9.3 High
- microsoft visual studio, visual studio .net, visual c\+\+ +2 moreThe Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...CVE-2009-2495EPSS 34.3%7.8 High
- microsoft visual studio, windows 2000, visual c\+\+ +4 more +6 moreThe Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...CVE-2009-2493EPSS 37.8%9.3 High
- microsoft visual studio, visual studio .net, visual c\+\+ +2 moreThe Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...CVE-2009-0901EPSS 36.6%9.3 High
- microsoft visual basic, visual foxpro, visual studio .net +2 more +4 moreThe Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003...CVE-2008-4256EPSS 21.0%8.5 High
- microsoft project, visual basic, visual foxpro +2 more +4 moreHeap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft...CVE-2008-4255Public exploitEPSS 53.7%9.3 High
- microsoft visual basic, visual foxpro, office frontpage +2 more +4 moreMultiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in...CVE-2008-4254EPSS 22.1%8.5 High
- microsoft office frontpage, project, visual basic +2 more +4 moreThe FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and...CVE-2008-4253EPSS 21.0%8.5 High
- microsoft visual basic, visual foxpro, office frontpage +2 more +4 moreThe DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1...CVE-2008-4252EPSS 21.0%8.5 High
- microsoft visual basic, visual foxpro, visual studio +1 more +3 moreHeap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and...CVE-2008-3704Public exploitEPSS 55.9%9.3 High
- Show moreLoading…