Visual Studio
by Microsoft
CVEs (284)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-30045 | Med | 0.41 | 6.3 | 0.01 | May 14, 2024 | .NET and Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2023-36558 | Med | 0.40 | 6.2 | 0.01 | Nov 14, 2023 | ASP.NET Core Security Feature Bypass Vulnerability | ||
| CVE-2023-36042 | Med | 0.40 | 6.2 | 0.01 | Nov 14, 2023 | Visual Studio Denial of Service Vulnerability | ||
| CVE-2023-35391 | Med | 0.40 | 6.2 | 0.02 | Aug 8, 2023 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | ||
| CVE-2022-24526 | Med | 0.40 | 6.1 | 0.02 | Mar 9, 2022 | Visual Studio Code Spoofing Vulnerability | ||
| CVE-2019-1486 | Med | 0.40 | 6.1 | 0.01 | Dec 10, 2019 | A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'. | ||
| CVE-2026-62897 | Hig | 0.39 | 7.0 | 0.00 | Aug 11, 2026 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | ||
| CVE-2021-41355 | Med | 0.39 | 5.7 | 0.20 | Oct 13, 2021 | .NET Core and Visual Studio Information Disclosure Vulnerability | ||
| CVE-2021-31957 | Med | 0.39 | 5.9 | 0.05 | Jun 8, 2021 | ASP.NET Core Denial of Service Vulnerability | ||
| CVE-2019-0657 | Med | 0.39 | 5.9 | 0.05 | Mar 5, 2019 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. | ||
| CVE-2024-30046 | Med | 0.38 | 5.9 | 0.02 | May 14, 2024 | Visual Studio Denial of Service Vulnerability | ||
| CVE-2025-32703 | Med | 0.36 | 5.5 | 0.00 | May 13, 2025 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. | ||
| CVE-2024-43603 | Med | 0.36 | 5.5 | 0.01 | Oct 8, 2024 | Visual Studio Collector Service Denial of Service Vulnerability | ||
| CVE-2023-33139 | Med | 0.36 | 5.5 | 0.01 | Jun 14, 2023 | Visual Studio Information Disclosure Vulnerability | ||
| CVE-2023-28299 | Med | 0.36 | 5.5 | 0.01 | Apr 11, 2023 | Visual Studio Spoofing Vulnerability | ||
| CVE-2023-28263 | Med | 0.36 | 5.5 | 0.01 | Apr 11, 2023 | Visual Studio Information Disclosure Vulnerability | ||
| CVE-2023-21567 | Med | 0.36 | 5.6 | 0.01 | Feb 14, 2023 | Visual Studio Denial of Service Vulnerability | ||
| CVE-2021-42277 | Med | 0.36 | 5.5 | 0.01 | Nov 10, 2021 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | ||
| CVE-2021-26437 | Med | 0.36 | 5.5 | 0.02 | Sep 15, 2021 | Visual Studio Code Spoofing Vulnerability | ||
| CVE-2020-17100 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Visual Studio Tampering Vulnerability |
- risk 0.41cvss 6.3epss 0.01
.NET and Visual Studio Remote Code Execution Vulnerability
- risk 0.40cvss 6.2epss 0.01
ASP.NET Core Security Feature Bypass Vulnerability
- risk 0.40cvss 6.2epss 0.01
Visual Studio Denial of Service Vulnerability
- risk 0.40cvss 6.2epss 0.02
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
- risk 0.40cvss 6.1epss 0.02
Visual Studio Code Spoofing Vulnerability
- risk 0.40cvss 6.1epss 0.01
A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.
- risk 0.39cvss 7.0epss 0.00
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
- risk 0.39cvss 5.7epss 0.20
.NET Core and Visual Studio Information Disclosure Vulnerability
- risk 0.39cvss 5.9epss 0.05
ASP.NET Core Denial of Service Vulnerability
- risk 0.39cvss 5.9epss 0.05
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
- risk 0.38cvss 5.9epss 0.02
Visual Studio Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.00
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.01
Visual Studio Collector Service Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Visual Studio Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Visual Studio Spoofing Vulnerability
- risk 0.36cvss 5.5epss 0.01
Visual Studio Information Disclosure Vulnerability
- risk 0.36cvss 5.6epss 0.01
Visual Studio Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.02
Visual Studio Code Spoofing Vulnerability
- risk 0.36cvss 5.5epss 0.01
Visual Studio Tampering Vulnerability
Page 12 of 15