Visual Studio 2017

CVEs (93)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-1147	Microsoft Visual Studio	Hig	0.73	7.8	0.94	KEV	Jul 14, 2020	A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVE-2019-1349	Microsoft Visual Studio	Hig	0.60	8.8	0.34		Jan 24, 2020	A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
CVE-2019-1354	Microsoft Visual Studio	Hig	0.59	8.8	0.23		Jan 24, 2020	A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.
CVE-2019-1352	Microsoft Visual Studio	Hig	0.59	8.8	0.24		Jan 24, 2020	A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.
CVE-2019-1350	Microsoft Visual Studio	Hig	0.59	8.8	0.26		Jan 24, 2020	A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
CVE-2020-1416	Microsoft Visual Studio	Hig	0.58	8.8	0.06		Jul 14, 2020	An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
CVE-2019-1113	Microsoft .net Framework	Hig	0.58	8.8	0.10		Jul 15, 2019	A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…
CVE-2019-0613	Microsoft .net Framework	Hig	0.58	8.8	0.15		Mar 5, 2019	A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET…
CVE-2025-49739	Microsoft Visual Studio	Hig	0.57	8.8	0.01		Jul 8, 2025	Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-21178	Microsoft Visual Studio	Hig	0.57	8.8	0.02		Jan 14, 2025	Visual Studio Remote Code Execution Vulnerability
CVE-2025-21176	Microsoft .net Framework	Hig	0.57	8.8	0.02		Jan 14, 2025	.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2022-35827	Microsoft Visual Studio	Hig	0.57	8.8	0.02		Aug 9, 2022	Visual Studio Remote Code Execution Vulnerability
CVE-2022-35826	Microsoft Visual Studio	Hig	0.57	8.8	0.02		Aug 9, 2022	Visual Studio Remote Code Execution Vulnerability
CVE-2022-35825	Microsoft Visual Studio	Hig	0.57	8.8	0.02		Aug 9, 2022	Visual Studio Remote Code Execution Vulnerability
CVE-2022-35777	Microsoft Visual Studio	Hig	0.57	8.8	0.02		Aug 9, 2022	Visual Studio Remote Code Execution Vulnerability
CVE-2021-36952	Microsoft Visual Studio	Hig	0.55	7.8	0.51		Sep 15, 2021	Visual Studio Remote Code Execution Vulnerability
CVE-2018-0952	Microsoft Windows Server 2016	Hig	0.54	7.8	0.06		Aug 15, 2018	An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…
CVE-2026-47304	Microsoft Net	Hig	0.53	8.1	0.00		Jul 14, 2026	Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2023-36897	Microsoft Office	Hig	0.53	8.1	0.02		Aug 8, 2023	Visual Studio Tools for Office Runtime Spoofing Vulnerability
CVE-2018-8172	Microsoft Visual Studio	Hig	0.53	7.8	0.33		Jul 11, 2018	A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

CVE-2020-1147HigKEVJul 14, 2020
Microsoft
Visual Studio
risk 0.73cvss 7.8epss 0.94
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVE-2019-1349HigJan 24, 2020
Microsoft
Visual Studio
risk 0.60cvss 8.8epss 0.34
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
CVE-2019-1354HigJan 24, 2020
Microsoft
Visual Studio
risk 0.59cvss 8.8epss 0.23
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.
CVE-2019-1352HigJan 24, 2020
Microsoft
Visual Studio
risk 0.59cvss 8.8epss 0.24
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.
CVE-2019-1350HigJan 24, 2020
Microsoft
Visual Studio
risk 0.59cvss 8.8epss 0.26
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
CVE-2020-1416HigJul 14, 2020
Microsoft
Visual Studio
risk 0.58cvss 8.8epss 0.06
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
CVE-2019-1113HigJul 15, 2019
Microsoft
.net Framework
risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code…
CVE-2019-0613HigMar 5, 2019
Microsoft
.net Framework
risk 0.58cvss 8.8epss 0.15
A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET…
CVE-2025-49739HigJul 8, 2025
Microsoft
Visual Studio
risk 0.57cvss 8.8epss 0.01
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-21178HigJan 14, 2025
Microsoft
Visual Studio
risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
CVE-2025-21176HigJan 14, 2025
Microsoft
.net Framework
risk 0.57cvss 8.8epss 0.02
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2022-35827HigAug 9, 2022
Microsoft
Visual Studio
risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35826HigAug 9, 2022
Microsoft
Visual Studio
risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35825HigAug 9, 2022
Microsoft
Visual Studio
risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35777HigAug 9, 2022
Microsoft
Visual Studio
risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
CVE-2021-36952HigSep 15, 2021
Microsoft
Visual Studio
risk 0.55cvss 7.8epss 0.51
Visual Studio Remote Code Execution Vulnerability
CVE-2018-0952HigAug 15, 2018
Microsoft
Windows Server 2016
risk 0.54cvss 7.8epss 0.06
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…
CVE-2026-47304HigJul 14, 2026
Microsoft
Net
risk 0.53cvss 8.1epss 0.00
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2023-36897HigAug 8, 2023
Microsoft
Office
risk 0.53cvss 8.1epss 0.02
Visual Studio Tools for Office Runtime Spoofing Vulnerability
CVE-2018-8172HigJul 11, 2018
Microsoft
Visual Studio
risk 0.53cvss 7.8epss 0.33
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

Page 1 of 5