VS
Product
Visual Studio
56
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 28Medium 9Low 0
Watch
Add Visual Studio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49739 | 8.8 | Jul 8 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network Affected: 2015 |
| CVE-2022-35827 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2022-35826 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2022-35825 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2022-35777 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2009-2493 | 8.8 | Jul 29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and… Affected: 2003; 2005; 2008; 2008 |
| CVE-2009-0901 | 8.8 | Jul 29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000… Affected: 2005; 2005; 2008; 2008 |
| CVE-2009-2502 | 8.1 | Oct 14 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: 2008; 2008 |
| CVE-2024-20656 | 7.8 | Jan 9 | Visual Studio Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2023-24897 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 2015; 2015 |
| CVE-2021-28322 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-28321 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-28313 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-1680 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-1651 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2020-16874 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 2012; 2013; 2015 |
| CVE-2020-16856 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 2012; 2013; 2015 |
| CVE-2020-1393 | 7.8 | Jul 14 | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading… Affected: 2015 |
| CVE-2020-1293 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 2015 |
| CVE-2020-1278 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 2015 |
| CVE-2020-1257 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 2015 |
| CVE-2020-1203 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 2015 |
| CVE-2020-1202 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 2015 |
| CVE-2019-1232 | 7.8 | Sep 11 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard… Affected: 2015 |
| CVE-2019-0727 | 7.8 | May 16 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To… Affected: 2015 |
| CVE-2018-8599 | 7.8 | Dec 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard… Affected: 2015 |
| CVE-2018-8172 | 7.8 | Jul 11 | A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio… Affected: 2010; 2012; 2013; 2015 |
| CVE-2010-3190 | 7.8 | Aug 31 | Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual… Affected: 2005; 2008; 2010 |
| CVE-2020-1130 | 6.6 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations Affected: 2015 |
| CVE-2019-1079 | 6.5 | Jul 15 | An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability' Affected: 2010; 2012; 2013; 2015 |
| CVE-2009-2495 | 6.5 | Jul 29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not… Affected: 2005; 2005; 2008; 2008 |
| CVE-2024-43603 | 5.5 | Oct 8 | Visual Studio Collector Service Denial of Service Vulnerability Affected: 2015 |
| CVE-2023-33139 | 5.5 | Jun 14 | Visual Studio Information Disclosure Vulnerability Affected: 2015; 2015 |
| CVE-2021-42277 | 5.5 | Nov 10 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2020-1133 | 5.5 | Sep 11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations Affected: 2015 |
| CVE-2019-0537 | 5.5 | Jan 8 | An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft… Affected: 2010; 2012 |
| CVE-2018-1037 | 4.3 | Apr 12 | An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka… Affected: 2010; 2012; 2013; 2015; 2017 |
| CVE-2014-3802 | – | May 20 | msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in… Affected: through 2012; 2002; 2003; 2005; 2010; 2010 |
| CVE-2012-0008 | – | Mar 13 | Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified… Affected: 2008; 2010; 2010 |
| CVE-2011-1976 | – | Aug 10 | Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary… Affected: 2005 |
| CVE-2011-1280 | – | Jun 16 | The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio… Affected: 2005; 2008; 2010 |
| CVE-2009-3126 | – | Oct 14 | Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project… Affected: 2008; 2008 |
| CVE-2009-2528 | – | Oct 14 | GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted… Affected: 2008; 2008 |
| CVE-2009-2504 | – | Oct 14 | Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista… Affected: 2008; 2008 |
| CVE-2009-2503 | – | Oct 14 | GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: 2008; 2008 |
| CVE-2009-2501 | – | Oct 14 | Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: 2008; 2008 |
| CVE-2009-2500 | – | Oct 14 | Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project… Affected: 2008; 2008 |
| CVE-2008-3704 | – | Aug 18 | Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic… Affected: 6.0 |
| CVE-2007-4890 | – | Sep 14 | Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote… Affected: 6.0 |
| CVE-2007-4891 | – | Sep 14 | A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL,… Affected: 6.0; 6.0.0.9782 |