Vulnerabilities > Microsoft > Visual Studio 2017

DATE CVE VULNERABILITY TITLE RISK
2024-10-08 CVE-2024-43590 Unspecified vulnerability in Microsoft Visual Studio 2019 and Visual Studio 2022
Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
local
low complexity
microsoft
7.8
2024-10-08 CVE-2024-43603 Unspecified vulnerability in Microsoft products
Visual Studio Collector Service Denial of Service Vulnerability
local
low complexity
microsoft
5.5
2023-08-08 CVE-2023-36897 Unspecified vulnerability in Microsoft products
Visual Studio Tools for Office Runtime Spoofing Vulnerability
network
low complexity
microsoft
6.5
2023-04-11 CVE-2023-28299 Unspecified vulnerability in Microsoft Visual Studio 2017
Visual Studio Spoofing Vulnerability
local
low complexity
microsoft
5.5
2022-05-10 CVE-2022-29148 Unspecified vulnerability in Microsoft Visual Studio 2017
Visual Studio Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2022-04-12 CVE-2022-24767 Uncontrolled Search Path Element vulnerability in multiple products
GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.
7.8
2022-01-11 CVE-2022-21871 Unspecified vulnerability in Microsoft products
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
local
low complexity
microsoft
7.8
2020-10-07 CVE-2020-26870 Cross-site Scripting vulnerability in multiple products
Cure53 DOMPurify before 2.0.17 allows mutation XSS.
network
low complexity
cure53 debian microsoft oracle CWE-79
6.1
2020-08-17 CVE-2020-1597 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests.
network
low complexity
microsoft fedoraproject
7.5
2020-07-14 CVE-2020-1416 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
network
low complexity
microsoft CWE-269
8.8