Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
33 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-41032 | 15.0.0 – < 16.9.26 | NuGet Client Elevation of Privilege Vulnerability | HIGH 7.8 | 1.3 % | ||
| CVE-2022-38013 | | .NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 4.0 % | ||
| CVE-2022-35827 | | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35826 | 15.0.0 – < 16.9.24 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35825 | 15.0.0 – < 16.9.24 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.2 % | ||
| CVE-2022-35777 | 15.0.0 – < 16.9.24 | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.1 % | ||
| CVE-2022-34716 | 15.0.0 – < 16.9.24 | .NET Spoofing Vulnerability | MEDIUM 5.9 | 2.5 % | ||
| CVE-2022-30184 | 15.0.0 – < 16.9.22 | .NET and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 5.7 % | ||
| CVE-2022-29145 | 15.0.0 – < 16.9.21 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.5 % | ||
| CVE-2022-29117 | 15.0.0 – < 16.9.21 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.7 % | ||
| CVE-2022-23267 | 15.0.0 – < 16.9.21 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.7 % | ||
| CVE-2022-24513 | 15.0.0 – < 16.9.23 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2022-24767 | unspecified | GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account. | HIGH 7.8 | 1.5 % | ||
| CVE-2022-24512 | 15.0.0 – < 16.9.18 | .NET and Visual Studio Remote Code Execution Vulnerability | MEDIUM 6.3 | 1.6 % | ||
| CVE-2022-24464 | 15.0.0 – < 16.9.18 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2022-21986 | 15.0.0 – < 16.9.17 | .NET Denial of Service Vulnerability | HIGH 7.5 | 3.7 % | ||
| CVE-2022-21871 | | Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2021-43877 | 15.0.0 – < 16.9.15 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | HIGH 8.8 | 0.7 % | ||
| CVE-2021-42319 | 15.0.0 – < 16.9.13 | Visual Studio Elevation of Privilege Vulnerability | MEDIUM 5.5 | 0.6 % | ||
| CVE-2021-42277 | 15.0.0 – < 16.9.13 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2021-41355 | 15.0.0 – < 16.9.12 | .NET Core and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.7 | 20 % | ||
| CVE-2021-26434 | 15.0.0 – < 16.9.11 | Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2021-34532 | | ASP.NET Core and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 1.2 % | ||
| CVE-2021-34485 | | .NET Core and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 2.1 % | ||
| CVE-2021-26423 | | .NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.9 % | ||
| CVE-2021-31957 | 15.0.0 – < 16.9.7 | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 5.1 % | ||
| CVE-2021-31204 | 15.0.0 – < publication | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2021-27068 | 15.0.0 – < publication | Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 54 % | ||
| CVE-2021-28322 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2021-28321 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.3 % | ||
| CVE-2021-28313 | | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2021-27064 | 15.0.0 – < publication | Visual Studio Installer Elevation of Privilege Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2021-26701 | | .NET Core Remote Code Execution Vulnerability | CRITICAL 9.8 | 30 % |