Microsoft Microsoft Visual Studio 2017
14 CVEs affecting Microsoft Microsoft Visual Studio 2017. Latest disclosed: 2020-01-24. Critical: 0, High: 11.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1354 | High | 8.8 | 2020-01-24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerabil… |
CVE-2019-1352 | High | 8.8 | 2020-01-24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerabil… |
CVE-2019-1350 | High | 8.8 | 2020-01-24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerabil… |
CVE-2019-1349 | High | 8.8 | 2020-01-24 | A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerabil… |
CVE-2019-1113 | High | 8.8 | 2019-07-15 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploit… |
CVE-2019-0613 | High | 8.8 | 2019-03-05 | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attac… |
CVE-2019-1232 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagno… |
CVE-2019-0727 | High | 7.8 | 2019-05-16 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbi… |
CVE-2019-0809 | High | 7.8 | 2019-04-09 | A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link librar… |
CVE-2019-1351 | High | 7.5 | 2020-01-24 | A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'. |
CVE-2019-1211 | High | 7.3 | 2019-08-14 | An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited t… |
CVE-2019-1425 | Medium | 6.5 | 2019-11-12 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elev… |
CVE-2019-0657 | Medium | 5.9 | 2019-03-05 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerabil… |
CVE-2019-1077 | Medium | 5.0 | 2019-07-15 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Priv… |