VS
Product
Visual Studio 2017
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 70Medium 22Low 1
Watch
Add Visual Studio 2017 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0793 | 7.8 | Mar 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 15.1 through 15.9 |
| CVE-2019-1232 | 7.8 | Sep 11 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard… Affected: 15.0; 15.9 |
| CVE-2019-0727 | 7.8 | May 16 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To… Affected: 15.0; 15.9 |
| CVE-2019-0809 | 7.8 | Apr 9 | A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka… Affected: 15.9 |
| CVE-2019-0546 | 7.8 | Jan 8 | A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code… Affected: 15.9 |
| CVE-2018-8599 | 7.8 | Dec 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard… Affected: 15.9 |
| CVE-2018-0952 | 7.8 | Aug 15 | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector… Affected: 15.8 |
| CVE-2018-8232 | 7.8 | Jul 11 | A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual… Affected: 15.7.5; 15.8 |
| CVE-2018-8172 | 7.8 | Jul 11 | A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio… Affected: 15.7.5 |
| CVE-2025-21172 | 7.5 | Jan 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 15.0 through 15.8 |
| CVE-2021-26423 | 7.5 | Aug 12 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-1597 | 7.5 | Aug 17 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests Affected: 15.0 through 15.8 |
| CVE-2020-1161 | 7.5 | May 21 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests Affected: 15.1 through 15.9 |
| CVE-2020-1108 | 7.5 | May 21 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests Affected: 15.9 |
| CVE-2019-1351 | 7.5 | Jan 24 | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability' Affected: 15.0 before 15.9.18 |
| CVE-2025-55240 | 7.3 | Oct 14 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.77 |
| CVE-2025-24998 | 7.3 | Mar 11 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally Affected: 15.0 before 15.9.71 |
| CVE-2025-21206 | 7.3 | Feb 11 | Visual Studio Installer Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.70 |
| CVE-2019-1211 | 7.3 | Aug 14 | An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files Affected: 15.9 |
| CVE-2021-1639 | 7.0 | Feb 25 | Visual Studio Code Remote Code Execution Vulnerability Affected: 15.0 through 15.9 |