Visual Studio 2017
by Microsoft
CVEs (93)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-28299 | Med | 0.36 | 5.5 | 0.01 | Apr 11, 2023 | Visual Studio Spoofing Vulnerability | ||
| CVE-2023-21567 | Med | 0.36 | 5.6 | 0.01 | Feb 14, 2023 | Visual Studio Denial of Service Vulnerability | ||
| CVE-2021-42277 | Med | 0.36 | 5.5 | 0.01 | Nov 10, 2021 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | ||
| CVE-2020-17100 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Visual Studio Tampering Vulnerability | ||
| CVE-2020-1133 | Med | 0.36 | 5.5 | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this… | ||
| CVE-2020-0900 | Med | 0.36 | 5.5 | 0.01 | Apr 15, 2020 | An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'. | ||
| CVE-2020-0899 | Med | 0.36 | 5.5 | 0.01 | Apr 15, 2020 | An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'. | ||
| CVE-2021-34485 | Med | 0.33 | 5.0 | 0.01 | Aug 12, 2021 | .NET Core and Visual Studio Information Disclosure Vulnerability | ||
| CVE-2020-26870 | Med | 0.33 | 6.1 | 0.05 | Oct 7, 2020 | Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements. | ||
| CVE-2019-1077 | Med | 0.33 | 5.0 | 0.02 | Jul 15, 2019 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'. | ||
| CVE-2021-42319 | Med | 0.31 | 4.7 | 0.01 | Nov 10, 2021 | Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2018-1037 | Med | 0.28 | 4.3 | 0.06 | Apr 12, 2018 | An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio. | ||
| CVE-2020-0884 | Low | 0.24 | 3.7 | 0.02 | Mar 12, 2020 | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'. |
- risk 0.36cvss 5.5epss 0.01
Visual Studio Spoofing Vulnerability
- risk 0.36cvss 5.6epss 0.01
Visual Studio Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Visual Studio Tampering Vulnerability
- risk 0.36cvss 5.5epss 0.01
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this…
- risk 0.36cvss 5.5epss 0.01
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.
- risk 0.36cvss 5.5epss 0.01
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
- risk 0.33cvss 5.0epss 0.01
.NET Core and Visual Studio Information Disclosure Vulnerability
- risk 0.33cvss 6.1epss 0.05
Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.
- risk 0.33cvss 5.0epss 0.02
An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.
- risk 0.31cvss 4.7epss 0.01
Visual Studio Elevation of Privilege Vulnerability
- risk 0.28cvss 4.3epss 0.06
An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.
- risk 0.24cvss 3.7epss 0.02
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
Page 5 of 5