High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-12	CVE-2021-1651	Improper Privilege Management vulnerability in Microsoft products Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability local low complexity microsoft CWE-269	7.8
2020-09-11	CVE-2020-16874	Unspecified vulnerability in Microsoft products <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. local low complexity microsoft	7.8
2020-09-11	CVE-2020-16856	Unspecified vulnerability in Microsoft products <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. local low complexity microsoft	7.8
2020-06-09	CVE-2020-1203	Improper Privilege Management vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-269	7.2
2020-06-09	CVE-2020-1202	Improper Privilege Management vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-269	7.2
2019-05-16	CVE-2019-0727	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'. local low complexity microsoft	7.2
2018-07-11	CVE-2018-8172	Unspecified vulnerability in Microsoft Expression Blend, Visual Studio and Visual Studio 2017 A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4. local low complexity microsoft	7.8
2009-07-29	CVE-2009-2495	Information Exposure vulnerability in Microsoft Visual C++, Visual Studio and Visual Studio .Net The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability." network low complexity microsoft CWE-200	7.8
2006-08-31	CVE-2006-4494	Denial of Service vulnerability in Microsoft Visual Studio 6.0 Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll. network low complexity microsoft	7.5
2001-05-03	CVE-2001-0153	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Microsoft Visual Basic and Visual Studio Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands. network low complexity microsoft CWE-119	7.5