Visual Studio
by Microsoft
CVEs (284)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-28929 | Hig | 0.57 | 8.8 | 0.02 | Apr 9, 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-26165 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Visual Studio Code Elevation of Privilege Vulnerability | ||
| CVE-2024-0056 | Hig | 0.57 | 8.7 | 0.01 | Jan 9, 2024 | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability | ||
| CVE-2022-35827 | Hig | 0.57 | 8.8 | 0.02 | Aug 9, 2022 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2022-35826 | Hig | 0.57 | 8.8 | 0.02 | Aug 9, 2022 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2022-35825 | Hig | 0.57 | 8.8 | 0.02 | Aug 9, 2022 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2022-35777 | Hig | 0.57 | 8.8 | 0.02 | Aug 9, 2022 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2021-43877 | Hig | 0.57 | 8.8 | 0.01 | Dec 15, 2021 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2021-36952 | Hig | 0.55 | 7.8 | 0.51 | Sep 15, 2021 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2021-26701 | Hig | 0.55 | 8.1 | 0.30 | Feb 25, 2021 | .NET Core Remote Code Execution Vulnerability | ||
| CVE-2023-36038 | Hig | 0.54 | 8.2 | 0.03 | Nov 14, 2023 | ASP.NET Core Denial of Service Vulnerability | ||
| CVE-2022-30129 | Hig | 0.54 | 8.8 | 0.41 | May 10, 2022 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2018-0952 | Hig | 0.54 | 7.8 | 0.06 | Aug 15, 2018 | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual… | ||
| CVE-2009-2502 | Hig | 0.54 | 8.1 | 0.22 | Oct 14, 2009 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003… | ||
| CVE-2026-50528 | Hig | 0.53 | 8.2 | 0.01 | Jul 14, 2026 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-47304 | Hig | 0.53 | 8.1 | 0.00 | Jul 14, 2026 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2024-38229 | Hig | 0.53 | 8.1 | 0.02 | Oct 8, 2024 | .NET and Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2024-35264 | Hig | 0.53 | 8.1 | 0.03 | Jul 9, 2024 | .NET and Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2023-36897 | Hig | 0.53 | 8.1 | 0.02 | Aug 8, 2023 | Visual Studio Tools for Office Runtime Spoofing Vulnerability | ||
| CVE-2023-33170 | Hig | 0.53 | 8.1 | 0.02 | Jul 11, 2023 | ASP.NET and Visual Studio Security Feature Bypass Vulnerability |
- risk 0.57cvss 8.8epss 0.02
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Visual Studio Code Elevation of Privilege Vulnerability
- risk 0.57cvss 8.7epss 0.01
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Visual Studio Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- risk 0.55cvss 7.8epss 0.51
Visual Studio Remote Code Execution Vulnerability
- risk 0.55cvss 8.1epss 0.30
.NET Core Remote Code Execution Vulnerability
- risk 0.54cvss 8.2epss 0.03
ASP.NET Core Denial of Service Vulnerability
- risk 0.54cvss 8.8epss 0.41
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.54cvss 7.8epss 0.06
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…
- risk 0.54cvss 8.1epss 0.22
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003…
- risk 0.53cvss 8.2epss 0.01
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.53cvss 8.1epss 0.00
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.53cvss 8.1epss 0.02
.NET and Visual Studio Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.03
.NET and Visual Studio Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.02
Visual Studio Tools for Office Runtime Spoofing Vulnerability
- risk 0.53cvss 8.1epss 0.02
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
Page 3 of 15