Microsoft Visual_studio
57 CVEs affecting Microsoft Visual_studio. Latest disclosed: 2025-07-08. Critical: 0, High: 29.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49739 | High | 8.8 | 2025-07-08 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
CVE-2022-35827 | High | 8.8 | 2022-08-09 | Visual Studio Remote Code Execution Vulnerability |
CVE-2022-35826 | High | 8.8 | 2022-08-09 | Visual Studio Remote Code Execution Vulnerability |
CVE-2022-35825 | High | 8.8 | 2022-08-09 | Visual Studio Remote Code Execution Vulnerability |
CVE-2022-35777 | High | 8.8 | 2022-08-09 | Visual Studio Remote Code Execution Vulnerability |
CVE-2009-2493 | High | 8.8 | 2009-07-29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold… |
CVE-2009-0901 | High | 8.8 | 2009-07-29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1… |
CVE-2009-2502 | High | 8.1 | 2009-10-14 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2… |
CVE-2024-20656 | High | 7.8 | 2024-01-09 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-24897 | High | 7.8 | 2023-06-14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2021-28322 | High | 7.8 | 2021-04-13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
CVE-2021-28321 | High | 7.8 | 2021-04-13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
CVE-2021-28313 | High | 7.8 | 2021-04-13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
CVE-2021-3146 | High | 7.8 | 2021-04-08 | The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges. |
CVE-2021-1680 | High | 7.8 | 2021-01-12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
CVE-2021-1651 | High | 7.8 | 2021-01-12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
CVE-2020-16874 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulne… |
CVE-2020-16856 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulne… |
CVE-2020-1393 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unse… |
CVE-2020-1293 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Sta… |