Visual Studio 2017 Security Vulnerabilities and Issues — Visual Studio 2017 CVE List

Lucene search

MicrosoftVisual Studio 2017

95 matches found

CVE•added 2020/07/14 11:15 p.m.•1270 views

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

7.8CVSS8.1AI score0.92846EPSS

CVE•added 2025/01/14 6:15 p.m.•1064 views

CVE-2025-21176

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

8.8CVSS9AI score0.00528EPSS

CVE•added 2023/09/12 5:15 p.m.•487 views

CVE-2023-36792

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01289EPSS

CVE•added 2023/09/12 5:15 p.m.•483 views

CVE-2023-36793

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01537EPSS

CVE•added 2023/09/12 5:15 p.m.•477 views

CVE-2023-36794

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00994EPSS

CVE•added 2023/09/12 5:15 p.m.•470 views

CVE-2023-36796

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01EPSS

CVE•added 2025/01/14 6:15 p.m.•385 views

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability

7.5CVSS7.8AI score0.00174EPSS

CVE•added 2024/10/08 6:15 p.m.•338 views

CVE-2024-43590

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.00269EPSS

CVE•added 2022/04/15 7:15 p.m.•243 views

CVE-2022-24513

Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00407EPSS

CVE•added 2018/08/15 5:29 p.m.•242 views

CVE-2018-0952

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers...

7.8CVSS7.9AI score0.39182EPSS

CVE•added 2022/08/09 8:15 p.m.•240 views

CVE-2022-35827

Visual Studio Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02005EPSS

CVE•added 2020/01/24 9:15 p.m.•233 views

CVE-2019-1349

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.

9.3CVSS9.2AI score0.23733EPSS

CVE•added 2020/01/24 9:15 p.m.•233 views

CVE-2019-1352

9.3CVSS9.2AI score0.23733EPSS

CVE•added 2023/02/14 9:15 p.m.•231 views

CVE-2023-21808

.NET and Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.0141EPSS

CVE•added 2023/08/08 6:15 p.m.•218 views

CVE-2023-36897

Visual Studio Tools for Office Runtime Spoofing Vulnerability

8.1CVSS7AI score0.00186EPSS

CVE•added 2024/01/09 6:15 p.m.•216 views

CVE-2024-20656

Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.57016EPSS

CVE•added 2020/05/21 11:15 p.m.•214 views

CVE-2020-1108

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

7.5CVSS7.3AI score0.02352EPSS

CVE•added 2020/01/24 9:15 p.m.•209 views

CVE-2019-1354

9.3CVSS9.2AI score0.23733EPSS

CVE•added 2020/07/14 11:15 p.m.•208 views

CVE-2020-1416

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

9.3CVSS8.7AI score0.10481EPSS

CVE•added 2023/06/14 3:15 p.m.•197 views

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01678EPSS

CVE•added 2020/01/24 9:15 p.m.•196 views

CVE-2019-1350

9.3CVSS9.2AI score0.23733EPSS

CVE•added 2023/04/11 9:15 p.m.•195 views

CVE-2023-28299

Visual Studio Spoofing Vulnerability

5.5CVSS5.8AI score0.00114EPSS

CVE•added 2021/08/12 6:15 p.m.•187 views

CVE-2021-34485

.NET Core and Visual Studio Information Disclosure Vulnerability

5.5CVSS5.8AI score0.00707EPSS

CVE•added 2021/08/12 6:15 p.m.•182 views

CVE-2021-26423

.NET Core and Visual Studio Denial of Service Vulnerability

7.5CVSS7.4AI score0.0242EPSS

CVE•added 2022/05/10 9:15 p.m.•181 views

CVE-2022-29148

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.03165EPSS

CVE•added 2019/07/29 2:9 p.m.•180 views

CVE-2019-1113

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.

8.8CVSS8.3AI score0.27594EPSS

CVE•added 2020/01/24 9:15 p.m.•180 views

CVE-2019-1351

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.

7.5CVSS8.3AI score0.17105EPSS

CVE•added 2022/04/12 6:15 p.m.•176 views

CVE-2022-24767

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

7.8CVSS7.6AI score0.01108EPSS

CVE•added 2022/08/09 8:15 p.m.•173 views

CVE-2022-34716

.NET Spoofing Vulnerability

5.9CVSS5.9AI score0.0075EPSS

CVE•added 2021/11/10 1:19 a.m.•169 views

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

7.8CVSS6.5AI score0.00284EPSS

CVE•added 2021/02/25 11:15 p.m.•153 views

CVE-2021-1721

.NET Core and Visual Studio Denial of Service Vulnerability

6.5CVSS6.6AI score0.07042EPSS

CVE•added 2023/02/14 9:15 p.m.•152 views

CVE-2023-21815

Visual Studio Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00386EPSS

CVE•added 2020/10/07 4:15 p.m.•151 views

CVE-2020-26870

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

6.1CVSS6.1AI score0.0029EPSS

CVE•added 2022/01/11 9:15 p.m.•149 views

CVE-2022-21871

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00379EPSS

CVE•added 2019/03/06 12:0 a.m.•143 views

CVE-2019-0657

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

5.9CVSS6.7AI score0.0553EPSS

CVE•added 2019/07/15 7:15 p.m.•141 views

CVE-2019-1077

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

6.6CVSS6.6AI score0.00959EPSS

CVE•added 2023/04/11 9:15 p.m.•141 views

CVE-2023-28296

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01043EPSS

CVE•added 2019/05/16 7:29 p.m.•140 views

CVE-2019-0727

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, ...

7.8CVSS7.3AI score0.00327EPSS

CVE•added 2020/08/17 7:15 p.m.•139 views

CVE-2020-1597

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.A remote...

7.5CVSS7.3AI score0.08489EPSS

CVE•added 2021/02/25 11:15 p.m.•136 views

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7AI score0.01254EPSS

CVE•added 2019/04/09 2:29 a.m.•134 views

CVE-2019-0757

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

6.5CVSS6.1AI score0.08184EPSS

CVE•added 2019/09/11 10:15 p.m.•133 views

CVE-2019-1232

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.0037EPSS

CVE•added 2022/08/09 8:15 p.m.•132 views

CVE-2022-35777

Visual Studio Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00129EPSS

CVE•added 2023/06/14 12:15 a.m.•132 views

CVE-2023-33139

Visual Studio Information Disclosure Vulnerability

5.5CVSS5.5AI score0.01135EPSS

CVE•added 2020/12/10 12:15 a.m.•131 views

CVE-2020-17156

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.06315EPSS

CVE•added 2025/01/14 6:15 p.m.•130 views

CVE-2025-21178

Visual Studio Remote Code Execution Vulnerability

8.8CVSS9AI score0.00528EPSS

CVE•added 2023/02/14 9:15 p.m.•129 views

CVE-2023-23381

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00146EPSS

CVE•added 2020/09/11 5:15 p.m.•121 views

CVE-2020-1133

<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p><p>An attacker could exploit this vulnerability by running a spe...

7.8CVSS6.7AI score0.00763EPSS

CVE•added 2019/03/06 12:0 a.m.•119 views

CVE-2019-0613

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual...

9.3CVSS9.3AI score0.20489EPSS

CVE•added 2022/08/09 8:15 p.m.•118 views

CVE-2022-35825

Visual Studio Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02005EPSS

Total number of security vulnerabilities95