VS
Product
Visual Studio 2017
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 70Medium 22Low 1
Watch
Add Visual Studio 2017 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29060 | 6.7 | Jun 11 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.63 |
| CVE-2020-1130 | 6.6 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations Affected: 15.0 before 15.9.27 |
| CVE-2023-36897 | 6.5 | Aug 8 | Visual Studio Tools for Office Runtime Spoofing Vulnerability Affected: 15.0 before 15.9.56 |
| CVE-2021-1721 | 6.5 | Feb 25 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 15.0 through 15.9 |
| CVE-2019-1425 | 6.5 | Nov 12 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege… Affected: 15.9 |
| CVE-2019-0757 | 6.5 | Apr 9 | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet… Affected: All versions, or not specified |
| CVE-2020-26870 | 6.1 | Oct 7 | Cure53 DOMPurify before 2.0.17 allows mutation XSS Affected: 15.9 |
| CVE-2019-0657 | 5.9 | Mar 5 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability' Affected: 15.9 |
| CVE-2023-21567 | 5.6 | Feb 14 | Visual Studio Denial of Service Vulnerability Affected: 15.0 before 15.9.52 |
| CVE-2025-32703 | 5.5 | May 13 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally Affected: 15.0 before 15.9.73 |
| CVE-2024-43603 | 5.5 | Oct 8 | Visual Studio Collector Service Denial of Service Vulnerability Affected: 15.0.0 before 15.9.67 |
| CVE-2023-33139 | 5.5 | Jun 14 | Visual Studio Information Disclosure Vulnerability Affected: 15.0 before 15.8; 15.9 before 15.9.55 |
| CVE-2023-28299 | 5.5 | Apr 11 | Visual Studio Spoofing Vulnerability Affected: 15.0 before 15.9.54 |
| CVE-2021-42277 | 5.5 | Nov 10 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-17100 | 5.5 | Nov 11 | Visual Studio Tampering Vulnerability Affected: 15.0 through 15.9 |
| CVE-2020-1133 | 5.5 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations Affected: 15.0 before 15.9.27 |
| CVE-2020-0900 | 5.5 | Apr 15 | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer… Affected: 15.9 |
| CVE-2020-0899 | 5.5 | Apr 15 | An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of… Affected: 15.9 |
| CVE-2021-34485 | 5.0 | Aug 12 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 15.0 through 15.9 |
| CVE-2019-1077 | 5.0 | Jul 15 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability' Affected: 15.9 |
| CVE-2021-42319 | 4.7 | Nov 10 | Visual Studio Elevation of Privilege Vulnerability Affected: 15.0 through 15.9 |
| CVE-2018-1037 | 4.3 | Apr 12 | An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka… Affected: 15.6.6; 15.7 |
Showing 22