Microsoft Microsoft Visual Studio 2017
14 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-1354 | 15.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 23 % | ||
| CVE-2019-1352 | 15.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 24 % | ||
| CVE-2019-1351 | 15.0 | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vul | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1350 | 15.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 26 % | ||
| CVE-2019-1349 | 15.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 34 % | ||
| CVE-2019-1425 | version 15.9 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka | MEDIUM 6.5 | 3.3 % | ||
| CVE-2019-1232 | version 15.9 ; 15.0 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper | HIGH 7.8 | 0.8 % | ||
| CVE-2019-1211 | 15.0 – < publication | Git for Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.7 % | ||
| CVE-2019-1113 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 10.0 % | ||
| CVE-2019-1077 | version 15.9 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studi | MEDIUM 5.0 | 1.8 % | ||
| CVE-2019-0727 | version 15.9 ; 15.0 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi | HIGH 7.8 | 1.0 % | ||
| CVE-2019-0809 | version 15.9 | A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading | HIGH 7.8 | 11 % | ||
| CVE-2019-0657 | | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio | MEDIUM 5.9 | 4.5 % | ||
| CVE-2019-0613 | | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup | HIGH 8.8 | 15 % |