VS
Product
Visual Studio 2019 for Mac version 8.9
On CISA KEVExploited in the wild
119
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 87Medium 30Low 1
Watch
Add Visual Studio 2019 for Mac version 8.9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29060 | 6.7 | Jun 11 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.37 |
| CVE-2023-36759 | 6.7 | Sep 12 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 before 16.11.30 |
| CVE-2020-1130 | 6.6 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations Affected: 16.0 before 16.4.13; 16.5 before 16.7.3 |
| CVE-2023-36897 | 6.5 | Aug 8 | Visual Studio Tools for Office Runtime Spoofing Vulnerability Affected: 16.0 before 16.11.29 |
| CVE-2021-1721 | 6.5 | Feb 25 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 16.0 through 16.8 |
| CVE-2020-8927 | 6.5 | Sep 15 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger… Affected: 16.0 through 16.11 |
| CVE-2019-1425 | 6.5 | Nov 12 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege… Affected: 16.0; 16.3 |
| CVE-2022-24512 | 6.3 | Mar 9 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 16.0 through 16.6.4; 16.7.0 before 16.7.26; 16.8.0 through 16.8.7; 16.9.0 before 16.9.18; 16.10.0 through 16.10.4; 16.11.0 before 16.11.11 |
| CVE-2020-26870 | 6.1 | Oct 7 | Cure53 DOMPurify before 2.0.17 allows mutation XSS Affected: 16.0; 16.4; 16.7; 16.8 |
| CVE-2019-1486 | 6.1 | Dec 10 | A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka… Affected: 16.0 through 16.4 |
| CVE-2021-31957 | 5.9 | Jun 8 | ASP.NET Core Denial of Service Vulnerability Affected: 15.0.0 before 16.9.7 |
| CVE-2021-41355 | 5.7 | Oct 13 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 16.0 through 16.11 |
| CVE-2023-21567 | 5.6 | Feb 14 | Visual Studio Denial of Service Vulnerability Affected: 16.0 before 16.11.24 |
| CVE-2025-32703 | 5.5 | May 13 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally Affected: 16.0 before 16.11.47 |
| CVE-2024-43603 | 5.5 | Oct 8 | Visual Studio Collector Service Denial of Service Vulnerability Affected: 16.0.0 before 16.11.41 |
| CVE-2023-36042 | 5.5 | Nov 14 | Visual Studio Denial of Service Vulnerability Affected: 16.0 before 16.11.32 |
| CVE-2023-33139 | 5.5 | Jun 14 | Visual Studio Information Disclosure Vulnerability Affected: 16.0 through 16.10; 16.11 before 16.11.27 |
| CVE-2023-28299 | 5.5 | Apr 11 | Visual Studio Spoofing Vulnerability Affected: 16.0 before 16.11.26 |
| CVE-2023-28263 | 5.5 | Apr 11 | Visual Studio Information Disclosure Vulnerability Affected: 16.0 before 16.11.26 |
| CVE-2022-30184 | 5.5 | Jun 15 | .NET and Visual Studio Information Disclosure Vulnerability Affected: 16.0 before 16.9.22; 16.10 before 16.11.6; 8.10 |
| CVE-2021-42277 | 5.5 | Nov 10 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 16.0 through 16.11 |
| CVE-2021-34532 | 5.5 | Aug 12 | ASP.NET Core and Visual Studio Information Disclosure Vulnerability Affected: 16.0 through 16.10; 8.10 |
| CVE-2020-17100 | 5.5 | Nov 11 | Visual Studio Tampering Vulnerability Affected: 16.0 through 16.6; 16.8 |
| CVE-2020-1133 | 5.5 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations Affected: 16.0 before 16.4.13; 16.5 before 16.7.3 |
| CVE-2020-0900 | 5.5 | Apr 15 | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer… Affected: 16.0; 16.4; 16.5.0 |
| CVE-2020-0899 | 5.5 | Apr 15 | An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of… Affected: 16.0; 16.4; 16.5.0 |
| CVE-2021-34485 | 5.0 | Aug 12 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 16.0 through 16.10 |
| CVE-2019-1077 | 5.0 | Jul 15 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability' Affected: 16.0; 16.1 |
| CVE-2024-30052 | 4.7 | Jun 11 | Visual Studio Remote Code Execution Vulnerability Affected: 15.0 before 15.9.63; 16.0 through 16.11.37 |
| CVE-2021-42319 | 4.7 | Nov 10 | Visual Studio Elevation of Privilege Vulnerability Affected: 16.0 through 16.11 |
Showing 30