Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
72 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-47304 | | .NET Security Feature Bypass Vulnerability | CRITICAL 9.8 | 0.3 % | ||
| CVE-2025-55240 | 15.9.0 – < 15.9.77 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 0.4 % | ||
| CVE-2025-49739 | 15.9.0 – < 15.9.75 | Visual Studio Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2025-32703 | 15.9.0 – < 15.9.73 | Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2025-24998 | 15.9.0 – < 15.9.71 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 0.5 % | ||
| CVE-2025-21206 | 15.9.0 – < 15.9.70 | Visual Studio Installer Elevation of Privilege Vulnerability | HIGH 7.3 | 0.7 % | ||
| CVE-2025-21172 | 15.9.0 – < 15.9.69 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.5 | 1.8 % | ||
| CVE-2025-21178 | 15.9.0 – < 15.9.69 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2025-21176 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-43603 | 15.9.0 – < 15.9.67 | Visual Studio Collector Service Denial of Service Vulnerability | MEDIUM 5.5 | 0.8 % | ||
| CVE-2024-43590 | 15.9.0 – < 15.9.67 | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2024-35272 | 15.9.0 – < 15.9.66 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-30052 | 15.9.0 – < 15.9.63 | Visual Studio Remote Code Execution Vulnerability | MEDIUM 4.7 | 1.4 % | ||
| CVE-2024-29060 | 15.9.0 – < 15.9.63 | Visual Studio Elevation of Privilege Vulnerability | MEDIUM 6.7 | 0.9 % | ||
| CVE-2024-20656 | 15.9.0 – < 15.9.59 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 3.9 % | ||
| CVE-2023-36793 | 15.9.0 – < 15.9.57 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36792 | 15.9.0 – < 15.9.57 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36796 | 15.9.0 – < 15.9.57 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36794 | 15.9.0 – < 15.9.57 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36897 | 15.9.0 – < 15.9.56 | Visual Studio Tools for Office Runtime Spoofing Vulnerability | HIGH 8.1 | 1.7 % | ||
| CVE-2023-24897 | 15.9.0 – < 15.9.55 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-33139 | 15.9.0 – < 15.9.55 | Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 0.8 % | ||
| CVE-2023-28299 | 15.9.0 – < 15.9.54 | Visual Studio Spoofing Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-28296 | 15.9.0 – < 15.9.54 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2023-23381 | 15.9.0 – < 15.9.52 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2023-21815 | 15.9.0 – < 15.9.52 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2023-21808 | | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-21567 | 15.9.0 – < 15.9.52 | Visual Studio Denial of Service Vulnerability | MEDIUM 5.6 | 0.8 % | ||
| CVE-2023-21566 | 15.9.0 – < 15.9.52 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2022-41119 | 15.9.0 – < 15.9.51 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2022-35827 | 15.9.0 – < 15.9.50 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35826 | 15.9.0 – < 15.9.50 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35825 | 15.9.0 – < 15.9.50 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35777 | 15.9.0 – < 15.9.50 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.1 % | ||
| CVE-2022-34716 | 15.9.0 – < 15.9.50 | .NET Spoofing Vulnerability | MEDIUM 5.9 | 2.5 % | ||
| CVE-2022-29148 | 15.9.0 – < 15.9.48 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 2.8 % | ||
| CVE-2022-24513 | 15.9.0 – < 15.9.49 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2022-24767 | unspecified | GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account. | HIGH 7.8 | 1.5 % | ||
| CVE-2022-21871 | | Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2021-42319 | 15.9.0 – < 15.9.41 | Visual Studio Elevation of Privilege Vulnerability | MEDIUM 5.5 | 0.6 % | ||
| CVE-2021-42277 | 15.9.0 – < 15.9.41 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2021-36952 | 15.9.0 – < 15.9.39 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 51 % | ||
| CVE-2021-26434 | 15.9.0 – < 15.9.39 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2021-34485 | 15.9.0 – < 15.9.38 | .NET Core and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 2.1 % | ||
| CVE-2021-26423 | 15.9.0 – < 15.9.38 | .NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.9 % | ||
| CVE-2021-28322 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2021-28321 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.3 % | ||
| CVE-2021-28313 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2021-27064 | 15.9.0 – < publication | Visual Studio Installer Elevation of Privilege Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2021-26701 | 15.9.0 – < publication | .NET Core Remote Code Execution Vulnerability | CRITICAL 9.8 | 30 % | ||
| CVE-2021-1721 | | .NET Core and Visual Studio Denial of Service Vulnerability | MEDIUM 6.5 | 3.3 % | ||
| CVE-2021-1639 | 15.9.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.1 % | ||
| CVE-2021-1680 | | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2021-1651 | | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2020-17156 | 15.9.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 3.1 % | ||
| CVE-2020-17100 | 15.9.0 – < publication | Visual Studio Tampering Vulnerability | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-1133 | 15.9.0 – < publication | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1130 | | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2020-16874 | 15.9.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 4.3 % | ||
| CVE-2020-16856 | 15.9.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 4.4 % | ||
| CVE-2020-1597 | 15.9.0 – < publication | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 6.6 % | ||
| CVE-2020-1416 | unspecified | An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Stu | HIGH 8.8 | 5.9 % | ||
| CVE-2020-1393 | | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1147 | unspecified | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the | HIGH 7.8 | 94 % | KEV | |
| CVE-2020-1293 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1278 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1257 | unspecified | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1203 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1202 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1161 | 15.9.0 – < publication | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 5.3 % | ||
| CVE-2020-1108 | | .NET Core & .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 6.5 % | ||
| CVE-2019-1211 | 15.9.0 – < publication | Git for Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.7 % |