VS
Product
Visual Studio 2017
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 70Medium 22Low 1
Watch
Add Visual Studio 2017 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1147 In wildKEV | 7.8 | Jul 14 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.9 |
| CVE-2026-47304 | 9.8 | Jul 14 | .NET Security Feature Bypass Vulnerability Affected: 15.0 through 15.9 |
| CVE-2025-49739 | 8.8 | Jul 8 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network Affected: 15.0 before 15.9.75 |
| CVE-2025-21178 | 8.8 | Jan 14 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.69 |
| CVE-2025-21176 | 8.8 | Jan 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.69 |
| CVE-2022-35827 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 15.9 |
| CVE-2022-35826 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 15.9 |
| CVE-2022-35825 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 15.9 |
| CVE-2022-35777 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-1416 | 8.8 | Jul 14 | An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of… Affected: 15.0 before 15.9.25 |
| CVE-2019-1354 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 15.0 before 15.9.18 |
| CVE-2019-1352 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 15.0 before 15.9.18 |
| CVE-2019-1350 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 15.0 before 15.9.18 |
| CVE-2019-1349 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 15.0 before 15.9.18 |
| CVE-2019-1113 | 8.8 | Jul 15 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability… Affected: 15.9; 16.0; 16.1 |
| CVE-2019-0613 | 8.8 | Mar 5 | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully… Affected: 15.9 |
| CVE-2024-43590 | 7.8 | Oct 8 | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.67 |
| CVE-2024-20656 | 7.8 | Jan 9 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.59 |
| CVE-2023-36796 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.57 |
| CVE-2023-36794 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.57 |
| CVE-2023-36793 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.57 |
| CVE-2023-36792 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.57 |
| CVE-2023-24897 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.8; 15.9 before 15.9.55 |
| CVE-2023-28296 | 7.8 | Apr 11 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.54 |
| CVE-2023-23381 | 7.8 | Feb 14 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.52 |
| CVE-2023-21815 | 7.8 | Feb 14 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.52 |
| CVE-2023-21808 | 7.8 | Feb 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.51 |
| CVE-2023-21566 | 7.8 | Feb 14 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.52 |
| CVE-2022-41119 | 7.8 | Nov 9 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.9 |
| CVE-2022-29148 | 7.8 | May 10 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.48 |
| CVE-2022-24513 | 7.8 | Apr 15 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.9 before 15.9.49 |
| CVE-2022-24767 | 7.8 | Apr 12 | GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account Affected: 15.0 before 15.9.46 |
| CVE-2022-21871 | 7.8 | Jan 11 | Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.44 |
| CVE-2021-36952 | 7.8 | Sep 15 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.9 |
| CVE-2021-26434 | 7.8 | Sep 15 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2021-28322 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2021-28321 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2021-28313 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2021-27064 | 7.8 | Apr 13 | Visual Studio Installer Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2021-1680 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 15.0 through 15.8 |
| CVE-2021-1651 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 15.0 before 15.9 |
| CVE-2020-17156 | 7.8 | Dec 10 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-16874 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 15.0 through 15.8 |
| CVE-2020-16856 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 15.0 through 15.8 |
| CVE-2020-1393 | 7.8 | Jul 14 | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading… Affected: 15.0 before 15.9.25 |
| CVE-2020-1293 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 15.0 through 15.9 |
| CVE-2020-1278 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 15.0 through 15.9 |
| CVE-2020-1257 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 15.0 through 15.9 |
| CVE-2020-1203 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 15.0 through 15.9 |
| CVE-2020-1202 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 15.0 through 15.9 |