VS
Product
Visual Studio 2019 for Mac version 8.9
On CISA KEVExploited in the wild
119
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 87Medium 30Low 1
Watch
Add Visual Studio 2019 for Mac version 8.9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1147 In wildKEV | 7.8 | Jul 14 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.6 |
| CVE-2025-49739 | 8.8 | Jul 8 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network Affected: 16.0 before 16.11.49 |
| CVE-2025-21178 | 8.8 | Jan 14 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.43 |
| CVE-2024-28938 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28937 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28936 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28935 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28934 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28933 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28932 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28931 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28930 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2024-28929 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0 before 16.11.35 |
| CVE-2022-35827 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 16.9; 16.11 |
| CVE-2022-35826 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 16.9; 16.11 |
| CVE-2022-35825 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 16.9; 16.11 |
| CVE-2022-35777 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.11 |
| CVE-2021-43877 | 8.8 | Dec 15 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability Affected: 16.7; 16.9; 16.11 |
| CVE-2021-27068 | 8.8 | May 11 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.4.22; 16.5.0 before 16.7.15; 16.8.0 before 16.9.5 |
| CVE-2020-1416 | 8.8 | Jul 14 | An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of… Affected: 16.0 before 16.0.16; 16.1 before 16.4.11; 16.5 before 16.6.4 |
| CVE-2019-1354 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 16.0 before 16.4.1 |
| CVE-2019-1352 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 16.0 before 16.4.1 |
| CVE-2019-1350 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 16.0 before 16.4.1 |
| CVE-2019-1349 | 8.8 | Jan 24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability' Affected: 16.0 before 16.4.1 |
| CVE-2021-26701 | 8.1 | Feb 25 | .NET Core Remote Code Execution Vulnerability Affected: 16.0 through 16.9 |
| CVE-2021-24112 | 8.1 | Feb 25 | .NET Core Remote Code Execution Vulnerability Affected: 8.0.0 before publication |
| CVE-2025-32702 | 7.8 | May 13 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally Affected: 16.0 before 16.11.47 |
| CVE-2024-43590 | 7.8 | Oct 8 | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability Affected: 15.0 before 15.9.67; 16.0 before 16.11.41 |
| CVE-2024-20656 | 7.8 | Jan 9 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.33 |
| CVE-2023-36796 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.30 |
| CVE-2023-36794 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.30 |
| CVE-2023-36793 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.30 |
| CVE-2023-36792 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.30 |
| CVE-2023-24897 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.10; 16.11 before 16.11.27 |
| CVE-2023-28296 | 7.8 | Apr 11 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.26 |
| CVE-2023-28262 | 7.8 | Apr 11 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.26 |
| CVE-2023-23381 | 7.8 | Feb 14 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.24 |
| CVE-2023-21815 | 7.8 | Feb 14 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.24 |
| CVE-2023-21808 | 7.8 | Feb 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 16.0 before 16.11.24 |
| CVE-2023-21566 | 7.8 | Feb 14 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.24 |
| CVE-2022-41119 | 7.8 | Nov 9 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.11 |
| CVE-2022-41032 | 7.8 | Oct 11 | NuGet Client Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.9.26; 16.10.0 before 16.11.20 |
| CVE-2022-24513 | 7.8 | Apr 15 | Visual Studio Elevation of Privilege Vulnerability Affected: 8.10 before 8.10.24; 16.7 before 16.7.27; 16.9 before 16.9.23; 16.11 before 16.11.16 |
| CVE-2022-24767 | 7.8 | Apr 12 | GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account Affected: 16.0 before 16.7.27; 16.8 before 16.9.19; 16.10 before 16.11.12 |
| CVE-2022-21871 | 7.8 | Jan 11 | Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability Affected: 16.0 before 16.7.25; 16.8 before 16.9.17 |
| CVE-2021-36952 | 7.8 | Sep 15 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.7 |
| CVE-2021-26434 | 7.8 | Sep 15 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 through 16.11 |
| CVE-2021-28322 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 16.0 through 16.7; 16.8 through 16.9 |
| CVE-2021-28321 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 16.0 through 16.7; 16.8 through 16.9 |
| CVE-2021-28313 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 16.0 through 16.7; 16.8 through 16.9 |