VS
Product
Visual Studio 2019 for Mac version 8.9
On CISA KEVExploited in the wild
119
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 87Medium 30Low 1
Watch
Add Visual Studio 2019 for Mac version 8.9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-28313 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 16.0 through 16.7; 16.8 through 16.9 |
| CVE-2021-27064 | 7.8 | Apr 13 | Visual Studio Installer Elevation of Privilege Vulnerability Affected: 16.0 through 16.4; 16.6 through 16.7; 16.8 through 16.9 |
| CVE-2021-1680 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 16.0 through 16.7.0; 16.8 |
| CVE-2021-1651 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 16.0 before 16.4; 16.5 before 16.7; 16.8 |
| CVE-2020-17156 | 7.8 | Dec 10 | Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.8 |
| CVE-2020-16874 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 16.0 through 16.3; 16.5 through 16.6 |
| CVE-2020-16856 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 16.0 through 16.3; 16.5 through 16.6 |
| CVE-2020-1393 | 7.8 | Jul 14 | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading… Affected: 16.0 before 16.4.11; 16.5.0 before 16.6.4 |
| CVE-2020-1293 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 16.0 through 16.6 |
| CVE-2020-1278 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 16.0 through 16.6 |
| CVE-2020-1257 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 16.0 through 16.6 |
| CVE-2020-1203 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 16.0 through 16.6 |
| CVE-2020-1202 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 16.0 through 16.6 |
| CVE-2020-0810 | 7.8 | Mar 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To… Affected: 16.0 through 16.4 |
| CVE-2020-0793 | 7.8 | Mar 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 16.0 through 16.4 |
| CVE-2019-1232 | 7.8 | Sep 11 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard… Affected: 16.0; 16.2 |
| CVE-2019-0727 | 7.8 | May 16 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To… Affected: 16.0 |
| CVE-2025-21172 | 7.5 | Jan 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.10 |
| CVE-2022-38013 | 7.5 | Sep 13 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 16.9; 16.11 |
| CVE-2022-29145 | 7.5 | May 10 | .NET and Visual Studio Denial of Service Vulnerability Affected: 16.0 before 16.9.21; 16.10 before 16.11.14 |
| CVE-2022-29117 | 7.5 | May 10 | .NET and Visual Studio Denial of Service Vulnerability Affected: 16.0 through 16.0.11 |
| CVE-2022-23267 | 7.5 | May 10 | .NET and Visual Studio Denial of Service Vulnerability Affected: 16.0 before 16.9.21; 16.10 before 16.11.14 |
| CVE-2022-24464 | 7.5 | Mar 9 | .NET and Visual Studio Denial of Service Vulnerability Affected: 16.0 through 16.6.4; 16.7.0 before 16.7.26; 16.8.0 through 16.8.7; 16.9.0 before 16.9.18; 16.10.0 through 16.10.4; 16.11.0 before 16.11.11 |
| CVE-2022-21986 | 7.5 | Feb 9 | .NET Denial of Service Vulnerability Affected: 8.10 before 8.10.18; 16.0 through 16.11 |
| CVE-2021-26423 | 7.5 | Aug 12 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 16.0 through 16.10; 8.10 |
| CVE-2021-1723 | 7.5 | Jan 12 | ASP.NET Core and Visual Studio Denial of Service Vulnerability Affected: 16.0 through 16.8 |
| CVE-2020-1597 | 7.5 | Aug 17 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests Affected: 16.0 through 16.3; 16.5 through 16.6 |
| CVE-2020-1161 | 7.5 | May 21 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests Affected: 16.0 through 16.5 |
| CVE-2020-1108 | 7.5 | May 21 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests Affected: 16.0; 16.4; 16.5 |
| CVE-2019-1351 | 7.5 | Jan 24 | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability' Affected: 16.0 before 16.4.1 |
| CVE-2025-55240 | 7.3 | Oct 14 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally Affected: 16.0 before 16.11.52 |
| CVE-2025-25003 | 7.3 | Mar 11 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally Affected: 16.0 before 16.11.45 |
| CVE-2025-24998 | 7.3 | Mar 11 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally Affected: 16.0 before 16.11.45 |
| CVE-2025-21206 | 7.3 | Feb 11 | Visual Studio Installer Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.44 |
| CVE-2021-31204 | 7.3 | May 11 | .NET and Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before publication |
| CVE-2019-1211 | 7.3 | Aug 14 | An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files Affected: 16.0; 16.2 |
| CVE-2020-0789 | 7.1 | Mar 12 | A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of… Affected: 16.0 through 16.4 |
| CVE-2021-1639 | 7.0 | Feb 25 | Visual Studio Code Remote Code Execution Vulnerability Affected: 16.0 through 16.8 |
| CVE-2024-29060 | 6.7 | Jun 11 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.37 |
| CVE-2023-36759 | 6.7 | Sep 12 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.30 |
| CVE-2020-1130 | 6.6 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations Affected: 16.0 before 16.4.13; 16.5 before 16.7.3 |
| CVE-2023-36897 | 6.5 | Aug 8 | Visual Studio Tools for Office Runtime Spoofing Vulnerability Affected: 16.0 before 16.11.29 |
| CVE-2021-1721 | 6.5 | Feb 25 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 16.0 through 16.8 |
| CVE-2020-8927 | 6.5 | Sep 15 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger… Affected: 16.0 through 16.11 |
| CVE-2019-1425 | 6.5 | Nov 12 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege… Affected: 16.0; 16.3 |
| CVE-2022-24512 | 6.3 | Mar 9 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.6.4; 16.7.0 before 16.7.26; 16.8.0 through 16.8.7; 16.9.0 before 16.9.18; 16.10.0 through 16.10.4; 16.11.0 before 16.11.11 |
| CVE-2020-26870 | 6.1 | Oct 7 | Cure53 DOMPurify before 2.0.17 allows mutation XSS Affected: 16.0; 16.4; 16.7; 16.8 |
| CVE-2019-1486 | 6.1 | Dec 10 | A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka… Affected: 16.0 through 16.4 |
| CVE-2021-31957 | 5.9 | Jun 8 | ASP.NET Core Denial of Service Vulnerability Affected: 15.0.0 before 16.9.7 |
| CVE-2021-41355 | 5.7 | Oct 13 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 16.0 through 16.11 |