VS
Product
Visual Studio
56
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 28Medium 9Low 0
Watch
Add Visual Studio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49739 | 8.8 | Jul 8 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network Affected: 2015 |
| CVE-2022-35827 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2022-35826 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2022-35825 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2022-35777 | 8.8 | Aug 9 | Visual Studio Remote Code Execution Vulnerability Affected: 2012; 2013; 2015 |
| CVE-2009-2493 | 8.8 | Jul 29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and… Affected: 2003; 2005; 2008; 2008 |
| CVE-2009-0901 | 8.8 | Jul 29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000… Affected: 2005; 2005; 2008; 2008 |
| CVE-2009-2502 | 8.1 | Oct 14 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: 2008; 2008 |
| CVE-2024-20656 | 7.8 | Jan 9 | Visual Studio Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2023-24897 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 2015; 2015 |
| CVE-2021-28322 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-28321 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-28313 | 7.8 | Apr 13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-1680 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2021-1651 | 7.8 | Jan 12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Affected: 2015 |
| CVE-2020-16874 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 2012; 2013; 2015 |
| CVE-2020-16856 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory Affected: 2012; 2013; 2015 |
| CVE-2020-1393 | 7.8 | Jul 14 | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading… Affected: 2015 |
| CVE-2020-1293 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 2015 |
| CVE-2020-1278 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 2015 |
| CVE-2020-1257 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector… Affected: 2015 |
| CVE-2020-1203 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 2015 |
| CVE-2020-1202 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka… Affected: 2015 |
| CVE-2019-1232 | 7.8 | Sep 11 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard… Affected: 2015 |
| CVE-2019-0727 | 7.8 | May 16 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To… Affected: 2015 |
| CVE-2018-8599 | 7.8 | Dec 12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard… Affected: 2015 |
| CVE-2018-8172 | 7.8 | Jul 11 | A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio… Affected: 2010; 2012; 2013; 2015 |
| CVE-2010-3190 | 7.8 | Aug 31 | Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual… Affected: 2005; 2008; 2010 |
Showing 28