Microsoft Microsoft Visual Studio
23 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1393 | | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1293 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1278 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1257 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1203 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1202 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0900 | 2015 Update 3 | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'V | MEDIUM 5.5 | 0.8 % | ||
| CVE-2020-0810 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-0793 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2019-1232 | 2015 Update 3 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper | HIGH 7.8 | 0.8 % | ||
| CVE-2019-1113 | 2017 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 10.0 % | ||
| CVE-2019-1079 | 2010 Service Pack 1 ; 2012 Update 5 ; 2013 Update 5 ; … | An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio | MEDIUM 6.5 | 6.1 % | ||
| CVE-2019-0727 | 2015 Update 3 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi | HIGH 7.8 | 1.0 % | ||
| CVE-2019-0757 | 2017 for Mac | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet | MEDIUM 6.5 | 2.7 % | ||
| CVE-2019-0657 | 2017 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio | MEDIUM 5.9 | 4.5 % | ||
| CVE-2019-0613 | 2017 | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup | HIGH 8.8 | 15 % | ||
| CVE-2019-0546 | 2017 version 15.9 | A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ construc | HIGH 7.8 | 16 % | ||
| CVE-2019-0537 | 2010 Service Pack 1 ; 2012 Update 5 | An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicio | MEDIUM 5.5 | 7.6 % | ||
| CVE-2018-8599 | 2015 Update 3 ; 2017 ; 2017 version 15.9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper | HIGH 7.8 | 1.0 % | ||
| CVE-2018-0952 | 2015 Update 3 ; 2017 ; 2017 Version 15.8 | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Dia | HIGH 7.8 | 6.2 % | ||
| CVE-2018-8232 | 2017 ; 2017 Version 15.7.5 ; 2017 Version 15.8 Preview | A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerab | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8172 | 2010 Service Pack 1 ; 2012 Update 5 ; 2013 Update 5 ; … | A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an u | HIGH 7.8 | 34 % | ||
| CVE-2018-1037 | 2010 Service Pack 1 ; 2012 Update 5 ; 2013 Update 5 ; … | An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compil | MEDIUM 4.3 | 5.8 % |