CVE-2021-31204

.NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-36042

Visual Studio Denial of Service Vulnerability

CVE-2024-28934

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVE-2022-41032

NuGet Client Elevation of Privilege Vulnerability

CVE-2022-24767

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

CVE-2021-34532

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

CVE-2022-34716

.NET Spoofing Vulnerability

CVE-2022-21986

.NET Denial of Service Vulnerability

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVE-2021-31957

ASP.NET Core Denial of Service Vulnerability

CVE-2024-28938

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVE-2021-1723

ASP.NET Core and Visual Studio Denial of Service Vulnerability

CVE-2024-28932

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVE-2024-28935

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVE-2021-1721

.NET Core and Visual Studio Denial of Service Vulnerability

CVE-2023-21815

Visual Studio Remote Code Execution Vulnerability

CVE-2020-26870

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

CVE-2022-21871

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

CVE-2019-1077

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

CVE-2020-1597

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.A remote...

CVE-2023-28296

Visual Studio Remote Code Execution Vulnerability

CVE-2019-0727

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, ...

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

CVE-2019-1232

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.

CVE-2020-17156

Visual Studio Remote Code Execution Vulnerability

CVE-2022-35777

Visual Studio Remote Code Execution Vulnerability

CVE-2023-33139

Visual Studio Information Disclosure Vulnerability

CVE-2023-23381

Visual Studio Remote Code Execution Vulnerability

CVE-2025-21178

Visual Studio Remote Code Execution Vulnerability

CVE-2021-27068

Visual Studio Remote Code Execution Vulnerability

CVE-2023-28262

Visual Studio Elevation of Privilege Vulnerability

CVE-2020-1133

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially cra...

CVE-2022-35825

Visual Studio Remote Code Execution Vulnerability

CVE-2020-16856

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an atta...

CVE-2020-1130

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially cra...

CVE-2020-1161

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

CVE-2022-35826

Visual Studio Remote Code Execution Vulnerability

CVE-2024-35272

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVE-2020-1202

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1203.

CVE-2023-21566

Visual Studio Elevation of Privilege Vulnerability

CVE-2021-1651

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVE-2020-0810

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system.An attacker could then run a specially cr...

CVE-2021-28321

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

CVE-2021-43877

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

CVE-2020-1393

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1418.

CVE-2021-1680

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVE-2021-28313

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

CVE-2020-16874

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an atta...

CVE-2021-28322

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

CVE-2021-36952

Visual Studio Remote Code Execution Vulnerability