Visual Studio 2017 Security Vulnerabilities and Issues — Visual Studio 2017 CVE List

Lucene search

MicrosoftVisual Studio 2017

91 matches found

CVE•added 2020/07/14 11:15 p.m.•1310 views

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

7.8CVSS8.1AI score0.92742EPSS

In wildWeb

CVE•added 2025/01/14 6:15 p.m.•1127 views

CVE-2025-21176

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

8.8CVSS9AI score0.00662EPSS

CVE•added 2023/09/12 5:15 p.m.•521 views

CVE-2023-36792

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01289EPSS

CVE•added 2023/09/12 5:15 p.m.•518 views

CVE-2023-36793

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01537EPSS

CVE•added 2023/09/12 5:15 p.m.•511 views

CVE-2023-36794

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00994EPSS

CVE•added 2023/09/12 5:15 p.m.•504 views

CVE-2023-36796

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01EPSS

CVE•added 2025/01/14 6:15 p.m.•450 views

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability

7.5CVSS7.8AI score0.00287EPSS

CVE•added 2024/10/08 6:15 p.m.•342 views

CVE-2024-43590

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.00336EPSS

CVE•added 2018/08/15 5:29 p.m.•274 views

CVE-2018-0952

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers...

7.8CVSS7.9AI score0.39182EPSS

In wild

CVE•added 2023/02/14 9:15 p.m.•265 views

CVE-2023-21808

.NET and Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01752EPSS

CVE•added 2020/01/24 9:15 p.m.•243 views

CVE-2019-1349

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.

9.3CVSS9.2AI score0.39133EPSS

CVE•added 2020/01/24 9:15 p.m.•243 views

CVE-2019-1352

9.3CVSS9.2AI score0.39133EPSS

CVE•added 2022/08/09 8:15 p.m.•241 views

CVE-2022-35827

Visual Studio Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.06754EPSS

CVE•added 2023/06/14 3:15 p.m.•230 views

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.02262EPSS

CVE•added 2020/05/21 11:15 p.m.•227 views

CVE-2020-1108

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

7.5CVSS7.3AI score0.03486EPSS

CVE•added 2024/01/09 6:15 p.m.•225 views

CVE-2024-20656

Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.57016EPSS

CVE•added 2023/08/08 6:15 p.m.•220 views

CVE-2023-36897

Visual Studio Tools for Office Runtime Spoofing Vulnerability

8.1CVSS7AI score0.00156EPSS

CVE•added 2020/01/24 9:15 p.m.•212 views

CVE-2019-1354

9.3CVSS9.2AI score0.39133EPSS

CVE•added 2020/07/14 11:15 p.m.•212 views

CVE-2020-1416

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

9.3CVSS8.7AI score0.10481EPSS

CVE•added 2020/01/24 9:15 p.m.•198 views

CVE-2019-1350

9.3CVSS9.2AI score0.39133EPSS

CVE•added 2023/04/11 9:15 p.m.•196 views

CVE-2023-28299

Visual Studio Spoofing Vulnerability

5.5CVSS5.8AI score0.00114EPSS

CVE•added 2021/08/12 6:15 p.m.•195 views

CVE-2021-34485

.NET Core and Visual Studio Information Disclosure Vulnerability

5.5CVSS5.8AI score0.00707EPSS

CVE•added 2021/08/12 6:15 p.m.•191 views

CVE-2021-26423

.NET Core and Visual Studio Denial of Service Vulnerability

7.5CVSS7.4AI score0.0242EPSS

CVE•added 2020/01/24 9:15 p.m.•184 views

CVE-2019-1351

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.

7.5CVSS8.3AI score0.20285EPSS

CVE•added 2022/05/10 9:15 p.m.•183 views

CVE-2022-29148

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.03192EPSS

CVE•added 2019/07/29 2:9 p.m.•181 views

CVE-2019-1113

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.

8.8CVSS8.3AI score0.27594EPSS

CVE•added 2022/04/12 6:15 p.m.•178 views

CVE-2022-24767

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

7.8CVSS7.6AI score0.01253EPSS

CVE•added 2021/11/10 1:19 a.m.•171 views

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

7.8CVSS6.5AI score0.00356EPSS

CVE•added 2021/02/25 11:15 p.m.•156 views

CVE-2021-1721

.NET Core and Visual Studio Denial of Service Vulnerability

6.5CVSS6.6AI score0.07042EPSS

CVE•added 2023/02/14 9:15 p.m.•154 views

CVE-2023-21815

Visual Studio Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00386EPSS

CVE•added 2020/10/07 4:15 p.m.•152 views

CVE-2020-26870

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

6.1CVSS6.1AI score0.0029EPSS

CVE•added 2022/01/11 9:15 p.m.•151 views

CVE-2022-21871

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00379EPSS

CVE•added 2019/03/06 12:0 a.m.•148 views

CVE-2019-0657

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

5.9CVSS6.7AI score0.05691EPSS

CVE•added 2020/08/17 7:15 p.m.•143 views

CVE-2020-1597

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.A remote...

7.5CVSS7.3AI score0.08489EPSS

CVE•added 2023/04/11 9:15 p.m.•143 views

CVE-2023-28296

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01043EPSS

CVE•added 2019/07/15 7:15 p.m.•142 views

CVE-2019-1077

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

6.6CVSS6.6AI score0.00959EPSS

CVE•added 2019/05/16 7:29 p.m.•141 views

CVE-2019-0727

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, ...

7.8CVSS7.3AI score0.00327EPSS

CVE•added 2019/04/09 2:29 a.m.•139 views

CVE-2019-0757

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

6.5CVSS6.1AI score0.08047EPSS

CVE•added 2021/02/25 11:15 p.m.•138 views

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7AI score0.01254EPSS

CVE•added 2019/09/11 10:15 p.m.•134 views

CVE-2019-1232

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.0037EPSS

CVE•added 2020/12/10 12:15 a.m.•134 views

CVE-2020-17156

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.11473EPSS

CVE•added 2022/08/09 8:15 p.m.•134 views

CVE-2022-35777

Visual Studio Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00465EPSS

CVE•added 2025/01/14 6:15 p.m.•134 views

CVE-2025-21178

Visual Studio Remote Code Execution Vulnerability

8.8CVSS9AI score0.00575EPSS

CVE•added 2023/02/14 9:15 p.m.•133 views

CVE-2023-23381

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00146EPSS

CVE•added 2023/06/14 12:15 a.m.•133 views

CVE-2023-33139

Visual Studio Information Disclosure Vulnerability

5.5CVSS5.5AI score0.01135EPSS

CVE•added 2019/03/06 12:0 a.m.•122 views

CVE-2019-0613

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual...

9.3CVSS9.3AI score0.20489EPSS

CVE•added 2020/09/11 5:15 p.m.•122 views

CVE-2020-1133

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially cra...

7.8CVSS6.7AI score0.00763EPSS

CVE•added 2018/07/11 12:29 a.m.•120 views

CVE-2018-8172

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

9.3CVSS7.9AI score0.24612EPSS

CVE•added 2022/08/09 8:15 p.m.•119 views

CVE-2022-35825

Visual Studio Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02955EPSS

CVE•added 2020/09/11 5:15 p.m.•118 views

CVE-2020-16856

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an atta...

9.3CVSS7.9AI score0.05443EPSS

Total number of security vulnerabilities91