Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

94 records in Visual Studio 2017 · all components

TI-2020-01112 CVE-2020-1147 · GHSA-g5vf-38cp-4px9

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and…

Priority CRITICAL 93KEV

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Vi…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.95804 Published 2020-07-14 Fixed in 2.1.20, 3.1.6
TI-2019-01063 CVE-2019-1349 · GHSA-993f-36vw-6mhm

Improper input validation in Microsoft Visual Studio 2017 version 15.9

Priority MEDIUM 63

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.34007 Published 2020-01-24 Partial fix CWE-20
TI-2019-01064 CVE-2019-1350 · GHSA-v94j-fmjr-xrgv

Improper input validation in Microsoft Visual Studio 2019 version 16.4

Priority MEDIUM 60

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25666 Published 2020-01-24 No fix listed CWE-20
TI-2019-01066 CVE-2019-1352 · GHSA-74fq-3g57-65f7

Improper input validation in Microsoft Visual Studio 2019 version 16.4

Priority MEDIUM 59

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24014 Published 2020-01-24 Fixed CWE-20
TI-2019-01068 CVE-2019-1354 · GHSA-57mj-9r29-rj3q

Improper input validation in Microsoft Visual Studio 2019 version 16.4

Priority MEDIUM 58

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22598 Published 2020-01-24 No fix listed CWE-20
TI-2019-00403 CVE-2019-0613 · GHSA-v4cf-f45q-f5vv

Memory corruption in Microsoft .NET Framework 4.5.2

Priority MEDIUM 54

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run ar…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.15421 Published 2019-03-06 No fix listed CWE-119
TI-2019-00843 CVE-2019-1113 · GHSA-g6vh-82h8-g69w

Improper input validation in Microsoft .NET Framework 4.5.2

Priority MEDIUM 50

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.09996 Published 2019-07-29 No fix listed CWE-20
TI-2020-01376 CVE-2020-1416 · GHSA-76cm-vv6x-f8wv

Improper privilege management in Microsoft Visual Studio 2019 version 16.6

Priority MEDIUM 47

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05862 Published 2020-07-14 No fix listed CWE-269
TI-2019-00571 CVE-2019-0809 · GHSA-qgvr-5xp5-ffjw

Untrusted search path in Microsoft Visual Studio 2017

Priority MEDIUM 47

A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka 'Visual Studio Remote Code Execution Vulne…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.10551 Published 2019-04-09 No fix listed CWE-426
TI-2026-34881 CVE-2026-47304 · GHSA-g8r8-53c2-pm3f

.NET Security Feature Bypass Vulnerability

Priority MEDIUM 43

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00286 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-345
TI-2025-31708 CVE-2025-49739 · GHSA-cf69-g2cj-5w8c

Visual Studio Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00949 Published 2025-07-08 Fixed in 14.0.27564.0, 15.9.75 +5 CWE-59
TI-2020-01553 CVE-2020-1597 · GHSA-f8qx-mjcq-wfgx

ASP.NET Core Denial of Service Vulnerability

Priority MEDIUM 42

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06561 Published 2020-08-17 Fixed in publication, 2.1.21 +1 CWE-20
Load more
Open these records in search →