Visual Studio (Microsoft) - vulnerabilities (CVEs)

126 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2025-07-08. Vendor: Microsoft.

CVEs of Visual Studio

CVE-2025-49739 - CVSS 8.8 (high), 2025-07-08: Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2024-49044 - CVSS 6.7 (medium), 2024-11-12: Visual Studio Elevation of Privilege Vulnerability
CVE-2024-43499 - CVSS 7.5 (high), 2024-11-12: .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43498 - CVSS 9.8 (critical), 2024-11-12: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-43603 - CVSS 5.5 (medium), 2024-10-08: Visual Studio Collector Service Denial of Service Vulnerability
CVE-2024-43590 - CVSS 7.8 (high), 2024-10-08: Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
CVE-2024-43483 - CVSS 7.5 (high), 2024-10-08: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43485 - CVSS 7.5 (high), 2024-10-08: .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43484 - CVSS 7.5 (high), 2024-10-08: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-38229 - CVSS 8.1 (high), 2024-10-08: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-38167 - CVSS 6.5 (medium), 2024-08-13: .NET and Visual Studio Information Disclosure Vulnerability
CVE-2024-38168 - CVSS 7.5 (high), 2024-08-13: .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-38095 - CVSS 7.5 (high), 2024-07-09: .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-38081 - CVSS 7.3 (high), 2024-07-09: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2024-35272 - CVSS 8.8 (high), 2024-07-09: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-35264 - CVSS 8.1 (high), 2024-07-09: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30105 - CVSS 7.5 (high), 2024-07-09: .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-30046 - CVSS 5.9 (medium), 2024-05-14: Visual Studio Denial of Service Vulnerability
CVE-2024-30045 - CVSS 6.3 (medium), 2024-05-14: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-28936 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28938 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28937 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28933 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28932 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28935 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28931 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28934 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28930 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28929 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-21409 - CVSS 7.3 (high), 2024-04-09: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2024-26190 - CVSS 7.5 (high), 2024-03-12: Microsoft QUIC Denial of Service Vulnerability
CVE-2024-21392 - CVSS 7.5 (high), 2024-03-12: .NET and Visual Studio Denial of Service Vulnerability
CVE-2024-21404 - CVSS 7.5 (high), 2024-02-13: .NET Denial of Service Vulnerability
CVE-2024-21386 - CVSS 7.5 (high), 2024-02-13: .NET Denial of Service Vulnerability
CVE-2024-21319 - CVSS 6.8 (medium), 2024-01-09: Microsoft Identity Denial of service vulnerability
CVE-2024-20656 - CVSS 7.8 (high), 2024-01-09: Visual Studio Elevation of Privilege Vulnerability
CVE-2024-0056 - CVSS 8.7 (high), 2024-01-09: Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2024-0057 - CVSS 9.8 (critical), 2024-01-09: NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-36558 - CVSS 6.2 (medium), 2023-11-14: ASP.NET Core Security Feature Bypass Vulnerability
CVE-2023-36049 - CVSS 9.8 (critical), 2023-11-14: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36042 - CVSS 6.2 (medium), 2023-11-14: Visual Studio Denial of Service Vulnerability
CVE-2023-38171 - CVSS 7.5 (high), 2023-10-10: Microsoft QUIC Denial of Service Vulnerability
CVE-2023-36796 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36799 - CVSS 6.5 (medium), 2023-09-12: .NET Core and Visual Studio Denial of Service Vulnerability
CVE-2023-36792 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36794 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36793 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36759 - CVSS 6.7 (medium), 2023-09-12: Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36758 - CVSS 9.8 (critical), 2023-09-12: Visual Studio Elevation of Privilege Vulnerability
CVE-2023-33170 - CVSS 8.1 (high), 2023-07-11: ASP.NET and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-33127 - CVSS 8.1 (high), 2023-07-11: .NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-32026 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-32028 - CVSS 7.8 (high), 2023-06-16: Microsoft SQL OLE DB Remote Code Execution Vulnerability
CVE-2023-32027 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-29349 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-32025 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-29356 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-24897 - CVSS 7.8 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-24895 - CVSS 7.8 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-29331 - CVSS 7.5 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2023-24936 - CVSS 7.5 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-33135 - CVSS 7.3 (high), 2023-06-14: .NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-33139 - CVSS 5.5 (medium), 2023-06-14: Visual Studio Information Disclosure Vulnerability
CVE-2023-32032 - CVSS 6.5 (medium), 2023-06-14: .NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-33128 - CVSS 7.3 (high), 2023-06-14: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33126 - CVSS 7.3 (high), 2023-06-14: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-28299 - CVSS 5.5 (medium), 2023-04-11: Visual Studio Spoofing Vulnerability
CVE-2023-28296 - CVSS 7.8 (high), 2023-04-11: Visual Studio Remote Code Execution Vulnerability
CVE-2023-28262 - CVSS 7.8 (high), 2023-04-11: Visual Studio Elevation of Privilege Vulnerability
CVE-2023-28260 - CVSS 7.8 (high), 2023-04-11: .NET DLL Hijacking Remote Code Execution Vulnerability
CVE-2023-28263 - CVSS 5.5 (medium), 2023-04-11: Visual Studio Information Disclosure Vulnerability
CVE-2023-23381 - CVSS 7.8 (high), 2023-02-14: Visual Studio Remote Code Execution Vulnerability
CVE-2023-21815 - CVSS 7.8 (high), 2023-02-14: Visual Studio Remote Code Execution Vulnerability
CVE-2023-21808 - CVSS 7.8 (high), 2023-02-14: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2022-35826 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-35825 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-35827 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-35777 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-21871 - CVSS 7.8 (high), 2022-01-11: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
CVE-2021-42277 - CVSS 7.8 (high), 2021-11-10: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-28322 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28321 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28313 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-1680 - CVSS 7.8 (high), 2021-01-12: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-1651 - CVSS 7.8 (high), 2021-01-12: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2020-1133 - CVSS 7.8 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully…
CVE-2020-1130 - CVSS 7.8 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully…
CVE-2020-16874 - CVSS 7.8 (high), 2020-09-11: <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the…
CVE-2020-16856 - CVSS 7.8 (high), 2020-09-11: <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the…
CVE-2020-1393 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an…
CVE-2020-1293 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
CVE-2020-1278 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
CVE-2020-1257 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
CVE-2020-1202 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle…
CVE-2020-1203 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle…
CVE-2019-1232 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka…
CVE-2019-1079 - CVSS 6.5 (medium), 2019-07-15: An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information…
CVE-2019-0727 - CVSS 7.8 (high), 2019-05-16: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in…
CVE-2019-0537 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent…
CVE-2018-8599 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka…