Visual Studio 2019 (Microsoft) - vulnerabilities (CVEs)

130 CVEs, 0 in the last 30 days, 308 known versions, newest CVE from 2026-07-14. Vendor: Microsoft.

CVEs of Visual Studio 2019

• CVE-2026-47304 - CVSS 9.8 (critical), 2026-07-14: Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2025-55240 - CVSS 7.3 (high), 2025-10-14: Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
• CVE-2025-49739 - CVSS 8.8 (high), 2025-07-08: Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-32703 - CVSS 5.5 (medium), 2025-05-13: Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
• CVE-2025-32702 - CVSS 7.8 (high), 2025-05-13: Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.
• CVE-2025-25003 - CVSS 7.3 (high), 2025-03-11: Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
• CVE-2025-24998 - CVSS 7.3 (high), 2025-03-11: Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
• CVE-2025-21206 - CVSS 7.3 (high), 2025-02-11: Visual Studio Installer Elevation of Privilege Vulnerability
• CVE-2025-21178 - CVSS 8.8 (high), 2025-01-14: Visual Studio Remote Code Execution Vulnerability
• CVE-2025-21176 - CVSS 8.8 (high), 2025-01-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
• CVE-2025-21172 - CVSS 7.5 (high), 2025-01-14: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2024-43603 - CVSS 5.5 (medium), 2024-10-08: Visual Studio Collector Service Denial of Service Vulnerability
• CVE-2024-43590 - CVSS 7.8 (high), 2024-10-08: Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
• CVE-2024-35272 - CVSS 8.8 (high), 2024-07-09: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-30052 - CVSS 4.7 (medium), 2024-06-11: Visual Studio Remote Code Execution Vulnerability
• CVE-2024-29060 - CVSS 6.7 (medium), 2024-06-11: Visual Studio Elevation of Privilege Vulnerability
• CVE-2024-28937 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28936 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28938 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28931 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28934 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28933 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28932 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28935 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28930 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28929 - CVSS 8.8 (high), 2024-04-09: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-20656 - CVSS 7.8 (high), 2024-01-09: Visual Studio Elevation of Privilege Vulnerability
• CVE-2024-0057 - CVSS 9.8 (critical), 2024-01-09: NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
• CVE-2023-36042 - CVSS 6.2 (medium), 2023-11-14: Visual Studio Denial of Service Vulnerability
• CVE-2023-36796 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-36794 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-36793 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-36792 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-36759 - CVSS 6.7 (medium), 2023-09-12: Visual Studio Elevation of Privilege Vulnerability
• CVE-2023-36897 - CVSS 8.1 (high), 2023-08-08: Visual Studio Tools for Office Runtime Spoofing Vulnerability
• CVE-2023-32027 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2023-32026 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2023-32028 - CVSS 7.8 (high), 2023-06-16: Microsoft SQL OLE DB Remote Code Execution Vulnerability
• CVE-2023-29356 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2023-29349 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
• CVE-2023-32025 - CVSS 7.8 (high), 2023-06-16: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2023-24897 - CVSS 7.8 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
• CVE-2023-33139 - CVSS 5.5 (medium), 2023-06-14: Visual Studio Information Disclosure Vulnerability
• CVE-2023-28299 - CVSS 5.5 (medium), 2023-04-11: Visual Studio Spoofing Vulnerability
• CVE-2023-28296 - CVSS 7.8 (high), 2023-04-11: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-28262 - CVSS 7.8 (high), 2023-04-11: Visual Studio Elevation of Privilege Vulnerability
• CVE-2023-28263 - CVSS 5.5 (medium), 2023-04-11: Visual Studio Information Disclosure Vulnerability
• CVE-2023-23381 - CVSS 7.8 (high), 2023-02-14: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-21808 - CVSS 7.8 (high), 2023-02-14: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2023-21567 - CVSS 5.6 (medium), 2023-02-14: Visual Studio Denial of Service Vulnerability
• CVE-2023-21815 - CVSS 7.8 (high), 2023-02-14: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-21566 - CVSS 7.8 (high), 2023-02-14: Visual Studio Elevation of Privilege Vulnerability
• CVE-2022-41089 - CVSS 7.8 (high), 2022-12-13: .NET Framework Remote Code Execution Vulnerability
• CVE-2022-41119 - CVSS 7.8 (high), 2022-11-09: Visual Studio Remote Code Execution Vulnerability
• CVE-2022-41032 - CVSS 7.8 (high), 2022-10-11: NuGet Client Elevation of Privilege Vulnerability
• CVE-2022-38013 - CVSS 7.5 (high), 2022-09-13: .NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2022-35827 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
• CVE-2022-35826 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
• CVE-2022-35825 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
• CVE-2022-35777 - CVSS 8.8 (high), 2022-08-09: Visual Studio Remote Code Execution Vulnerability
• CVE-2022-34716 - CVSS 5.9 (medium), 2022-08-09: .NET Spoofing Vulnerability
• CVE-2022-30184 - CVSS 5.5 (medium), 2022-06-15: .NET and Visual Studio Information Disclosure Vulnerability
• CVE-2022-29145 - CVSS 7.5 (high), 2022-05-10: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2022-29117 - CVSS 7.5 (high), 2022-05-10: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2022-23267 - CVSS 7.5 (high), 2022-05-10: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2022-24513 - CVSS 7.8 (high), 2022-04-15: Visual Studio Elevation of Privilege Vulnerability
• CVE-2022-24767 - CVSS 7.8 (high), 2022-04-12: GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.
• CVE-2022-24512 - CVSS 6.3 (medium), 2022-03-09: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2022-24464 - CVSS 7.5 (high), 2022-03-09: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2022-21986 - CVSS 7.5 (high), 2022-02-09: .NET Denial of Service Vulnerability
• CVE-2022-21871 - CVSS 7.8 (high), 2022-01-11: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
• CVE-2021-43877 - CVSS 8.8 (high), 2021-12-15: ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
• CVE-2021-42319 - CVSS 5.5 (medium), 2021-11-10: Visual Studio Elevation of Privilege Vulnerability
• CVE-2021-42277 - CVSS 7.8 (high), 2021-11-10: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
• CVE-2021-41355 - CVSS 5.7 (medium), 2021-10-13: .NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2021-36952 - CVSS 7.8 (high), 2021-09-15: Visual Studio Remote Code Execution Vulnerability
• CVE-2021-26434 - CVSS 7.8 (high), 2021-09-15: Visual Studio Elevation of Privilege Vulnerability
• CVE-2021-34485 - CVSS 5.5 (medium), 2021-08-12: .NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2021-34532 - CVSS 5.5 (medium), 2021-08-12: ASP.NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2021-26423 - CVSS 7.5 (high), 2021-08-12: .NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2021-31957 - CVSS 7.5 (high), 2021-06-08: ASP.NET Core Denial of Service Vulnerability
• CVE-2021-31204 - CVSS 7.8 (high), 2021-05-11: .NET and Visual Studio Elevation of Privilege Vulnerability
• CVE-2021-27068 - CVSS 8.8 (high), 2021-05-11: Visual Studio Remote Code Execution Vulnerability
• CVE-2021-28322 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
• CVE-2021-28321 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
• CVE-2021-28313 - CVSS 7.8 (high), 2021-04-13: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
• CVE-2021-27064 - CVSS 7.8 (high), 2021-04-13: Visual Studio Installer Elevation of Privilege Vulnerability
• CVE-2021-26701 - CVSS 9.8 (critical), 2021-02-25: .NET Core Remote Code Execution Vulnerability
• CVE-2021-24112 - CVSS 9.8 (critical), 2021-02-25: .NET Core Remote Code Execution Vulnerability
• CVE-2021-1721 - CVSS 6.5 (medium), 2021-02-25: .NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2021-1639 - CVSS 7.8 (high), 2021-02-25: Visual Studio Code Remote Code Execution Vulnerability
• CVE-2021-1723 - CVSS 7.5 (high), 2021-01-12: ASP.NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2021-1680 - CVSS 7.8 (high), 2021-01-12: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
• CVE-2021-1651 - CVSS 7.8 (high), 2021-01-12: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
• CVE-2020-17156 - CVSS 7.8 (high), 2020-12-10: Visual Studio Remote Code Execution Vulnerability
• CVE-2020-17100 - CVSS 5.5 (medium), 2020-11-11: Visual Studio Tampering Vulnerability
• CVE-2020-26870 - CVSS 6.1 (medium), 2020-10-07: Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a…
• CVE-2020-8927 - CVSS 6.5 (medium), 2020-09-15: A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to…
• CVE-2020-1133 - CVSS 7.8 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully…
• CVE-2020-1130 - CVSS 7.8 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully…