Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-0900 | unspecified | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'V | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-0899 | unspecified | An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Micros | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-0884 | unspecified | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Stud | LOW 3.7 | 1.7 % | ||
| CVE-2020-0810 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-0793 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2019-1354 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 23 % | ||
| CVE-2019-1352 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 24 % | ||
| CVE-2019-1351 | unspecified | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vul | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1350 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 26 % | ||
| CVE-2019-1349 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 34 % |