VS
Product
Visual Studio 2017
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 70Medium 22Low 1
Watch
Add Visual Studio 2017 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0810 | 7.8 | Mar 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To… Affected: 15.1 through 15.9 |
| CVE-2020-0793 | 7.8 | Mar 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 15.1 through 15.9 |
| CVE-2019-1232 | 7.8 | Sep 11 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard… Affected: 15.0; 15.9 |
| CVE-2019-0727 | 7.8 | May 16 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To… Affected: 15.0; 15.9 |
| CVE-2019-0809 | 7.8 | Apr 9 | A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka… Affected: 15.9 |
| CVE-2019-0546 | 7.8 | Jan 8 | A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code… Affected: 15.9 |
| CVE-2018-8599 | 7.8 | Dec 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard… Affected: 15.9 |
| CVE-2018-0952 | 7.8 | Aug 15 | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector… Affected: 15.8 |
| CVE-2018-8232 | 7.8 | Jul 11 | A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual… Affected: 15.7.5; 15.8 |
| CVE-2018-8172 | 7.8 | Jul 11 | A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio… Affected: 15.7.5 |
| CVE-2025-21172 | 7.5 | Jan 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.8 |
| CVE-2021-26423 | 7.5 | Aug 12 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-1597 | 7.5 | Aug 17 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests Affected: 15.0 through 15.8 |
| CVE-2020-1161 | 7.5 | May 21 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests Affected: 15.1 through 15.9 |
| CVE-2020-1108 | 7.5 | May 21 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests Affected: 15.9 |
| CVE-2019-1351 | 7.5 | Jan 24 | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability' Affected: 15.0 before 15.9.18 |
| CVE-2025-55240 | 7.3 | Oct 14 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally Affected: 15.0 before 15.9.77 |
| CVE-2025-24998 | 7.3 | Mar 11 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally Affected: 15.0 before 15.9.71 |
| CVE-2025-21206 | 7.3 | Feb 11 | Visual Studio Installer Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.70 |
| CVE-2019-1211 | 7.3 | Aug 14 | An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files Affected: 15.9 |
| CVE-2021-1639 | 7.0 | Feb 25 | Visual Studio Code Remote Code Execution Vulnerability Affected: 15.0 through 15.9 |
| CVE-2024-29060 | 6.7 | Jun 11 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.63 |
| CVE-2020-1130 | 6.6 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations Affected: 15.0 before 15.9.27 |
| CVE-2023-36897 | 6.5 | Aug 8 | Visual Studio Tools for Office Runtime Spoofing Vulnerability Affected: 15.0 before 15.9.56 |
| CVE-2021-1721 | 6.5 | Feb 25 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 15.0 through 15.9 |
| CVE-2019-1425 | 6.5 | Nov 12 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege… Affected: 15.9 |
| CVE-2019-0757 | 6.5 | Apr 9 | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet… Affected: All versions, or not specified |
| CVE-2020-26870 | 6.1 | Oct 7 | Cure53 DOMPurify before 2.0.17 allows mutation XSS Affected: 15.9 |
| CVE-2019-0657 | 5.9 | Mar 5 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability' Affected: 15.9 |
| CVE-2023-21567 | 5.6 | Feb 14 | Visual Studio Denial of Service Vulnerability Affected: 15.0 before 15.9.52 |
| CVE-2025-32703 | 5.5 | May 13 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally Affected: 15.0 before 15.9.73 |
| CVE-2024-43603 | 5.5 | Oct 8 | Visual Studio Collector Service Denial of Service Vulnerability Affected: 15.0.0 before 15.9.67 |
| CVE-2023-33139 | 5.5 | Jun 14 | Visual Studio Information Disclosure Vulnerability Affected: 15.0 before 15.8; 15.9 before 15.9.55 |
| CVE-2023-28299 | 5.5 | Apr 11 | Visual Studio Spoofing Vulnerability Affected: 15.0 before 15.9.54 |
| CVE-2021-42277 | 5.5 | Nov 10 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-17100 | 5.5 | Nov 11 | Visual Studio Tampering Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-1133 | 5.5 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations Affected: 15.0 before 15.9.27 |
| CVE-2020-0900 | 5.5 | Apr 15 | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer… Affected: 15.9 |
| CVE-2020-0899 | 5.5 | Apr 15 | An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of… Affected: 15.9 |
| CVE-2021-34485 | 5.0 | Aug 12 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 15.0 through 15.9 |
| CVE-2019-1077 | 5.0 | Jul 15 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability' Affected: 15.9 |
| CVE-2021-42319 | 4.7 | Nov 10 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2018-1037 | 4.3 | Apr 12 | An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka… Affected: 15.6.6; 15.7 |
| CVE-2020-0884 | 3.7 | Mar 12 | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability' Affected: 15.1 through 15.8 |