Visual Studio 2017 (Microsoft) - vulnerabilities (CVEs)

98 CVEs, 0 in the last 30 days, 152 known versions, newest CVE from 2026-07-14. Vendor: Microsoft.

CVEs of Visual Studio 2017

CVE-2026-47304 - CVSS 9.8 (critical), 2026-07-14: Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-55240 - CVSS 7.3 (high), 2025-10-14: Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
CVE-2025-49739 - CVSS 8.8 (high), 2025-07-08: Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-32703 - CVSS 5.5 (medium), 2025-05-13: Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
CVE-2025-24998 - CVSS 7.3 (high), 2025-03-11: Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
CVE-2025-21206 - CVSS 7.3 (high), 2025-02-11: Visual Studio Installer Elevation of Privilege Vulnerability
CVE-2025-21178 - CVSS 8.8 (high), 2025-01-14: Visual Studio Remote Code Execution Vulnerability
CVE-2025-21176 - CVSS 8.8 (high), 2025-01-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2025-21172 - CVSS 7.5 (high), 2025-01-14: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-43603 - CVSS 5.5 (medium), 2024-10-08: Visual Studio Collector Service Denial of Service Vulnerability
CVE-2024-43590 - CVSS 7.8 (high), 2024-10-08: Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
CVE-2024-35272 - CVSS 8.8 (high), 2024-07-09: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-29060 - CVSS 6.7 (medium), 2024-06-11: Visual Studio Elevation of Privilege Vulnerability
CVE-2024-30052 - CVSS 4.7 (medium), 2024-06-11: Visual Studio Remote Code Execution Vulnerability
CVE-2024-20656 - CVSS 7.8 (high), 2024-01-09: Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36796 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36794 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36793 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36792 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
CVE-2023-36897 - CVSS 8.1 (high), 2023-08-08: Visual Studio Tools for Office Runtime Spoofing Vulnerability
CVE-2023-24897 - CVSS 7.8 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33139 - CVSS 5.5 (medium), 2023-06-14: Visual Studio Information Disclosure Vulnerability
CVE-2023-28299 - CVSS 5.5 (medium), 2023-04-11: Visual Studio Spoofing Vulnerability
CVE-2023-28296 - CVSS 7.8 (high), 2023-04-11: Visual Studio Remote Code Execution Vulnerability
CVE-2023-23381 - CVSS 7.8 (high), 2023-02-14: Visual Studio Remote Code Execution Vulnerability
CVE-2023-21808 - CVSS 7.8 (high), 2023-02-14: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-21567 - CVSS 5.6 (medium), 2023-02-14: Visual Studio Denial of Service Vulnerability
CVE-2023-21815 - CVSS 7.8 (high), 2023-02-14: Visual Studio Remote Code Execution Vulnerability
CVE-2023-21566 - CVSS 7.8 (high), 2023-02-14: Visual Studio Elevation of Privilege Vulnerability
CVE-2022-41119 - CVSS 7.8 (high), 2022-11-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-35825 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-35827 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-35826 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-35777 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
CVE-2022-34716 - CVSS 5.9 (medium), 2022-08-09: .NET Spoofing Vulnerability
CVE-2022-29148 - CVSS 7.8 (high), 2022-05-10: Visual Studio Remote Code Execution Vulnerability
CVE-2022-24513 - CVSS 7.8 (high), 2022-04-15: Visual Studio Elevation of Privilege Vulnerability
CVE-2022-24767 - CVSS 7.8 (high), 2022-04-12: GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.
CVE-2022-21871 - CVSS 7.8 (high), 2022-01-11: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
CVE-2021-42319 - CVSS 5.5 (medium), 2021-11-10: Visual Studio Elevation of Privilege Vulnerability
CVE-2021-42277 - CVSS 7.8 (high), 2021-11-10: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-36952 - CVSS 7.8 (high), 2021-09-15: Visual Studio Remote Code Execution Vulnerability
CVE-2021-26434 - CVSS 7.8 (high), 2021-09-15: Visual Studio Elevation of Privilege Vulnerability
CVE-2021-34485 - CVSS 5.5 (medium), 2021-08-12: .NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2021-26423 - CVSS 7.5 (high), 2021-08-12: .NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-28322 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28321 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28313 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-27064 - CVSS 7.8 (high), 2021-04-13: Visual Studio Installer Elevation of Privilege Vulnerability
CVE-2021-26701 - CVSS 9.8 (critical), 2021-02-25: .NET Core Remote Code Execution Vulnerability
CVE-2021-1639 - CVSS 7.8 (high), 2021-02-25: Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-1721 - CVSS 6.5 (medium), 2021-02-25: .NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-1680 - CVSS 7.8 (high), 2021-01-12: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-1651 - CVSS 7.8 (high), 2021-01-12: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2020-17156 - CVSS 7.8 (high), 2020-12-10: Visual Studio Remote Code Execution Vulnerability
CVE-2020-17100 - CVSS 5.5 (medium), 2020-11-11: Visual Studio Tampering Vulnerability
CVE-2020-26870 - CVSS 6.1 (medium), 2020-10-07: Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a…
CVE-2020-1130 - CVSS 7.8 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully…
CVE-2020-1133 - CVSS 7.8 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully…
CVE-2020-16874 - CVSS 7.8 (high), 2020-09-11: <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the…
CVE-2020-16856 - CVSS 7.8 (high), 2020-09-11: <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the…
CVE-2020-1597 - CVSS 7.5 (high), 2020-08-17: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could…
CVE-2020-1416 - CVSS 8.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual…
CVE-2020-1393 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an…
CVE-2020-1147 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of…
CVE-2020-1293 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
CVE-2020-1278 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
CVE-2020-1257 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
CVE-2020-1203 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle…
CVE-2020-1202 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle…
CVE-2020-1161 - CVSS 7.5 (high), 2020-05-21: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could…
CVE-2020-1108 - CVSS 7.5 (high), 2020-05-21: A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this…
CVE-2020-0900 - CVSS 5.5 (medium), 2020-04-15: An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio…
CVE-2020-0899 - CVSS 5.5 (medium), 2020-04-15: An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio…
CVE-2020-0884 - CVSS 3.7 (low), 2020-03-12: A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing…
CVE-2020-0810 - CVSS 7.8 (high), 2020-03-12: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in…
CVE-2020-0793 - CVSS 7.8 (high), 2020-03-12: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub…
CVE-2019-1350 - CVSS 8.8 (high), 2020-01-24: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution…
CVE-2019-1354 - CVSS 8.8 (high), 2020-01-24: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution…
CVE-2019-1349 - CVSS 8.8 (high), 2020-01-24: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution…
CVE-2019-1352 - CVSS 8.8 (high), 2020-01-24: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution…
CVE-2019-1351 - CVSS 7.5 (high), 2020-01-24: A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.
CVE-2019-1425 - CVSS 6.5 (medium), 2019-11-12: An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio…
CVE-2019-1232 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka…
CVE-2019-1211 - CVSS 7.3 (high), 2019-08-14: An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited…
CVE-2019-1113 - CVSS 8.8 (high), 2019-07-15: A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully…
CVE-2019-1077 - CVSS 5 (medium), 2019-07-15: An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of…
CVE-2019-0727 - CVSS 7.8 (high), 2019-05-16: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in…
CVE-2019-0809 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link…
CVE-2019-0757 - CVSS 6.5 (medium), 2019-04-09: A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder…
CVE-2019-0657 - CVSS 5.9 (medium), 2019-03-05: A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing…
CVE-2019-0613 - CVSS 8.8 (high), 2019-03-05: A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An…
CVE-2019-0546 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual…
CVE-2018-8599 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka…
CVE-2018-0952 - CVSS 7.8 (high), 2018-08-15: An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub…
CVE-2018-8172 - CVSS 7.8 (high), 2018-07-11: A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project,…
CVE-2018-8232 - CVSS 7.8 (high), 2018-07-11: A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This…
CVE-2018-1037 - CVSS 4.3 (medium), 2018-04-12: An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program…