Visual Studio 2015 (Microsoft) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-07-08. Vendor: Microsoft.

CVEs of Visual Studio 2015

• CVE-2025-49739 - CVSS 8.8 (high), 2025-07-08: Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-21172 - CVSS 7.5 (high), 2025-01-14: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2025-21178 - CVSS 8.8 (high), 2025-01-14: Visual Studio Remote Code Execution Vulnerability
• CVE-2025-21176 - CVSS 8.8 (high), 2025-01-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
• CVE-2021-42277 - CVSS 7.8 (high), 2021-11-10: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
• CVE-2020-0900 - CVSS 5.5 (medium), 2020-04-15: An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio…
• CVE-2020-0810 - CVSS 7.8 (high), 2020-03-12: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in…
• CVE-2020-0793 - CVSS 7.8 (high), 2020-03-12: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
• CVE-2018-0952 - CVSS 7.8 (high), 2018-08-15: An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub…