Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
47 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-36952 | 16.0 – < 16.4.26 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 51 % | ||
| CVE-2021-26434 | 16.0 – < 16.4.26 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2021-34532 | 16.0 – < 16.4.25 | ASP.NET Core and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 1.2 % | ||
| CVE-2021-34485 | | .NET Core and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 2.1 % | ||
| CVE-2021-26423 | | .NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.9 % | ||
| CVE-2021-31957 | 16.0 – < 16.4.23 | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 5.1 % | ||
| CVE-2021-31204 | 16.0 – < publication | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2021-27068 | 16.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 54 % | ||
| CVE-2021-28322 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2021-28321 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.3 % | ||
| CVE-2021-28313 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2021-27064 | 16.0 – < publication | Visual Studio Installer Elevation of Privilege Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2021-26701 | 16.0 – < publication | .NET Core Remote Code Execution Vulnerability | CRITICAL 9.8 | 30 % | ||
| CVE-2021-1721 | | .NET Core and Visual Studio Denial of Service Vulnerability | MEDIUM 6.5 | 3.3 % | ||
| CVE-2021-1639 | 16.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.1 % | ||
| CVE-2021-1723 | 16.0 – < publication | ASP.NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.3 % | ||
| CVE-2021-1680 | | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2021-1651 | | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2020-17156 | 16.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 3.1 % | ||
| CVE-2020-17100 | 16.0 – < publication | Visual Studio Tampering Vulnerability | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-1133 | 16.0 – < publication | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1130 | | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2020-16874 | 16.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 4.3 % | ||
| CVE-2020-16856 | 16.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 4.4 % | ||
| CVE-2020-1597 | 16.0 – < publication | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 6.6 % | ||
| CVE-2020-1416 | unspecified | An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Stu | HIGH 8.8 | 5.9 % | ||
| CVE-2020-1393 | | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1147 | | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the | HIGH 7.8 | 94 % | KEV | |
| CVE-2020-1293 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1278 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1257 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1203 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1202 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1161 | 16.0 – < publication | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 5.3 % | ||
| CVE-2020-1108 | | .NET Core & .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 6.5 % | ||
| CVE-2020-0900 | unspecified | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'V | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-0899 | unspecified | An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Micros | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-0884 | unspecified | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Stud | LOW 3.7 | 1.7 % | ||
| CVE-2020-0810 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-0793 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-0789 | unspecified | A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studi | HIGH 7.1 | 0.9 % | ||
| CVE-2019-1354 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 23 % | ||
| CVE-2019-1352 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 24 % | ||
| CVE-2019-1351 | unspecified | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vul | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1350 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 26 % | ||
| CVE-2019-1349 | unspecified | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 34 % | ||
| CVE-2019-1486 | unspecified | A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL | MEDIUM 6.1 | 1.6 % |