Microsoft Microsoft Visual Studio 2019
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1416 | 16.0 | An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Stu | HIGH 8.8 | 5.9 % | ||
| CVE-2020-1393 | | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1147 | 16.0 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the | HIGH 7.8 | 94 % | KEV | |
| CVE-2020-1293 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1278 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1257 | 16.0 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1203 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1202 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0900 | 16.0 | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'V | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-0899 | 16.0 | An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Micros | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-0884 | 16.0 | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Stud | LOW 3.7 | 1.7 % | ||
| CVE-2020-0810 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-0793 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-0789 | 16.0 | A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studi | HIGH 7.1 | 0.9 % | ||
| CVE-2019-1354 | 16.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 23 % | ||
| CVE-2019-1352 | 16.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 24 % | ||
| CVE-2019-1351 | 16.0 | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vul | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1350 | 16.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 26 % | ||
| CVE-2019-1349 | 16.0 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E | HIGH 8.8 | 34 % | ||
| CVE-2019-1486 | 16.0 | A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL | MEDIUM 6.1 | 1.6 % | ||
| CVE-2019-1425 | 16.0 ; 16.3 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka | MEDIUM 6.5 | 3.3 % | ||
| CVE-2019-1232 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper | HIGH 7.8 | 0.8 % | ||
| CVE-2019-1113 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 10.0 % | ||
| CVE-2019-1077 | 16.0 ; 16.1 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studi | MEDIUM 5.0 | 1.8 % | ||
| CVE-2019-0727 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi | HIGH 7.8 | 1.0 % |