Visual Studio 2019 Security Vulnerabilities and Issues — Visual Studio 2019 CVE List

Lucene search

MicrosoftVisual Studio 2019

70 matches found

CVE•added 2020/07/14 11:15 p.m.•1272 views

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

7.8CVSS8.1AI score0.92846EPSS

CVE•added 2023/09/12 5:15 p.m.•487 views

CVE-2023-36792

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.0114EPSS

CVE•added 2023/09/12 5:15 p.m.•483 views

CVE-2023-36793

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.0136EPSS

CVE•added 2023/06/16 1:15 a.m.•478 views

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00554EPSS

CVE•added 2023/09/12 5:15 p.m.•477 views

CVE-2023-36794

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00878EPSS

CVE•added 2023/09/12 5:15 p.m.•470 views

CVE-2023-36796

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00884EPSS

CVE•added 2023/06/16 1:15 a.m.•459 views

CVE-2023-32027

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.01131EPSS

CVE•added 2023/06/16 1:15 a.m.•452 views

CVE-2023-32025

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.01131EPSS

CVE•added 2023/06/16 1:15 a.m.•439 views

CVE-2023-32028

Microsoft SQL OLE DB Remote Code Execution Vulnerability

7.8CVSS8.2AI score0.01043EPSS

CVE•added 2023/06/16 1:15 a.m.•417 views

CVE-2023-32026

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.01131EPSS

CVE•added 2023/06/16 1:15 a.m.•415 views

CVE-2023-29356

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00555EPSS

CVE•added 2025/01/14 6:15 p.m.•387 views

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability

7.5CVSS7.8AI score0.00174EPSS

CVE•added 2024/10/08 6:15 p.m.•338 views

CVE-2024-43590

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.00269EPSS

CVE•added 2022/05/10 9:15 p.m.•299 views

CVE-2022-23267

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01762EPSS

CVE•added 2022/05/10 9:15 p.m.•281 views

CVE-2022-29117

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01512EPSS

CVE•added 2022/05/10 9:15 p.m.•255 views

CVE-2022-29145

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01659EPSS

CVE•added 2022/03/09 5:15 p.m.•244 views

CVE-2022-24464

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01236EPSS

CVE•added 2022/04/15 7:15 p.m.•243 views

CVE-2022-24513

Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00407EPSS

CVE•added 2023/02/14 9:15 p.m.•231 views

CVE-2023-21808

.NET and Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01248EPSS

CVE•added 2022/12/13 7:15 p.m.•222 views

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.08927EPSS

CVE•added 2024/01/09 6:15 p.m.•216 views

CVE-2024-20656

Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.57016EPSS

CVE•added 2020/05/21 11:15 p.m.•214 views

CVE-2020-1108

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

7.5CVSS7.3AI score0.02352EPSS

CVE•added 2023/06/14 3:15 p.m.•197 views

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01678EPSS

CVE•added 2022/09/13 7:15 p.m.•188 views

CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01393EPSS

CVE•added 2021/08/12 6:15 p.m.•182 views

CVE-2021-26423

.NET Core and Visual Studio Denial of Service Vulnerability

7.5CVSS7.4AI score0.0242EPSS

CVE•added 2021/05/11 7:15 p.m.•181 views

CVE-2021-31204

.NET and Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.3AI score0.08688EPSS

CVE•added 2020/01/24 9:15 p.m.•180 views

CVE-2019-1351

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.

7.5CVSS8.3AI score0.17105EPSS

CVE•added 2022/04/12 6:15 p.m.•176 views

CVE-2022-24767

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

7.8CVSS7.6AI score0.01108EPSS

CVE•added 2022/10/11 7:15 p.m.•175 views

CVE-2022-41032

NuGet Client Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.09029EPSS

CVE•added 2021/11/10 1:19 a.m.•169 views

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

7.8CVSS6.5AI score0.00284EPSS

CVE•added 2022/02/09 5:15 p.m.•169 views

CVE-2022-21986

.NET Denial of Service Vulnerability

7.5CVSS7.5AI score0.00444EPSS

CVE•added 2021/06/08 11:15 p.m.•167 views

CVE-2021-31957

ASP.NET Core Denial of Service Vulnerability

7.5CVSS6AI score0.03841EPSS

CVE•added 2021/01/12 8:15 p.m.•162 views

CVE-2021-1723

ASP.NET Core and Visual Studio Denial of Service Vulnerability

7.5CVSS7.3AI score0.03386EPSS

CVE•added 2023/02/14 9:15 p.m.•152 views

CVE-2023-21815

Visual Studio Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00386EPSS

CVE•added 2022/01/11 9:15 p.m.•149 views

CVE-2022-21871

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00379EPSS

CVE•added 2023/04/11 9:15 p.m.•141 views

CVE-2023-28296

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01043EPSS

CVE•added 2019/05/16 7:29 p.m.•140 views

CVE-2019-0727

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, ...

7.8CVSS7.3AI score0.00327EPSS

CVE•added 2020/08/17 7:15 p.m.•139 views

CVE-2020-1597

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.A remote...

7.5CVSS7.3AI score0.08489EPSS

CVE•added 2021/02/25 11:15 p.m.•136 views

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7AI score0.01254EPSS

CVE•added 2019/09/11 10:15 p.m.•133 views

CVE-2019-1232

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.0037EPSS

CVE•added 2020/12/10 12:15 a.m.•131 views

CVE-2020-17156

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.06315EPSS

CVE•added 2023/02/14 9:15 p.m.•129 views

CVE-2023-23381

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00146EPSS

CVE•added 2023/04/11 9:15 p.m.•126 views

CVE-2023-28262

Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00183EPSS

CVE•added 2020/09/11 5:15 p.m.•121 views

CVE-2020-1133

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially cra...

7.8CVSS6.7AI score0.00763EPSS

CVE•added 2020/09/11 5:15 p.m.•114 views

CVE-2020-1130

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially cra...

7.8CVSS7.2AI score0.00694EPSS

CVE•added 2020/06/09 8:15 p.m.•111 views

CVE-2020-1202

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1203.

7.8CVSS8AI score0.00744EPSS

CVE•added 2023/02/14 9:15 p.m.•111 views

CVE-2023-21566

Visual Studio Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00627EPSS

CVE•added 2020/05/21 11:15 p.m.•110 views

CVE-2020-1161

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

7.5CVSS7.3AI score0.03721EPSS

CVE•added 2021/01/12 8:15 p.m.•110 views

CVE-2021-1651

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability