Vulnerabilities

TI-2026-34881 CVE-2026-47304 · GHSA-g8r8-53c2-pm3f

.NET Security Feature Bypass Vulnerability

MEDIUM 43

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00286 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-345

TI-2025-34906 CVE-2025-55240 · GHSA-2r4x-qmjj-x52w

Visual Studio Elevation of Privilege Vulnerability

LOW 34

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00376 Published 2025-10-14 Fixed in 15.9.77, 16.11.52 +3 CWE-284

TI-2025-31708 CVE-2025-49739 · GHSA-cf69-g2cj-5w8c

Visual Studio Elevation of Privilege Vulnerability

MEDIUM 42

Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00949 Published 2025-07-08 Fixed in 14.0.27564.0, 15.9.75 +5 CWE-59

TI-2025-23768 CVE-2025-32703 · GHSA-c6v5-8q58-3543

Visual Studio Information Disclosure Vulnerability

LOW 25

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.005 Published 2025-05-13 Fixed in 15.9.73, 16.11.47 +4 CWE-1220

TI-2025-18676 CVE-2025-24998 · GHSA-565c-x77x-j8h4

Visual Studio Elevation of Privilege Vulnerability

LOW 34

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00456 Published 2025-03-11 Fixed in 15.9.71, 16.11.45 +4 CWE-427

TI-2025-15175 CVE-2025-21206 · GHSA-rg59-phq2-352q

Visual Studio Installer Elevation of Privilege Vulnerability

LOW 35

Visual Studio Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0069 Published 2025-02-11 Fixed in 15.9.70, 16.11.44 +3 CWE-427

TI-2025-15144 CVE-2025-21172 · GHSA-jjcv-wr2g-4rv4

.NET and Visual Studio Remote Code Execution Vulnerability

LOW 39

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01841 Published 2025-01-14 Partial fix · 8.0.12, 9.0.1 +7 CWE-122

TI-2025-15149 CVE-2025-21178 · GHSA-7qvp-9xw6-rpfp

Visual Studio Remote Code Execution Vulnerability

MEDIUM 43

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01603 Published 2025-01-14 Fixed in 14.0.24252.2, 15.9.69 +5 CWE-122

TI-2025-15147 CVE-2025-21176 · GHSA-gjf6-3w4p-7xfh

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

MEDIUM 45

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02381 Published 2025-01-14 Partial fix · 8.0.12, 9.0.1 +12 CWE-126

TI-2024-29231 CVE-2024-43603 · GHSA-8mp2-xq24-ffh7

Visual Studio Collector Service Denial of Service Vulnerability

LOW 26

Visual Studio Collector Service Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00767 Published 2024-10-08 Fixed in 14.0.27561.00, 15.9.67 +5 CWE-59

TI-2024-29219 CVE-2024-43590 · GHSA-hxgv-4m8q-mh2f

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

LOW 36

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0043 Published 2024-10-08 Fixed in 15.9.67, 16.11.41 +5 CWE-284

TI-2024-19240 CVE-2024-29060 · GHSA-wpj8-988q-w333

Visual Studio Elevation of Privilege Vulnerability

LOW 33

Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.7 Network Low privileges User interaction EPSS 0.00892 Published 2024-06-11 Fixed in 15.9.63, 16.11.37 +4 CWE-284

TI-2024-13468 CVE-2024-20656 · GHSA-7p5c-g6m3-v67r

Visual Studio Elevation of Privilege Vulnerability

MEDIUM 43

Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03946 Published 2024-01-09 Fixed in 15.9.59, 17.2.23 +4 CWE-59

TI-2023-18589 CVE-2023-36792 · GHSA-3qf9-qxfj-4whc

Visual Studio Remote Code Execution Vulnerability

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 15.9.57, 17.2.21 +16 CWE-190

TI-2023-18590 CVE-2023-36793 · GHSA-g4p8-g7mq-wpx4

Visual Studio Remote Code Execution Vulnerability

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 15.9.57, 17.2.21 +17 CWE-122

TI-2023-18591 CVE-2023-36794 · GHSA-38fq-h5hc-gwv8

Visual Studio Remote Code Execution Vulnerability

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 15.9.57, 17.2.21 +15 CWE-191

TI-2023-18592 CVE-2023-36796 · GHSA-h7jm-g87p-5935

Visual Studio Remote Code Execution Vulnerability

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 17.6.9, 17.7.6 +19 CWE-191

TI-2023-18682 CVE-2023-36897 · GHSA-8w7q-cfxq-v32g

Visual Studio Tools for Office Runtime Spoofing Vulnerability

MEDIUM 41

Visual Studio Tools for Office Runtime Spoofing Vulnerability

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01684 Published 2023-08-08 Fixed in https://aka.ms/OfficeSecurityReleases, 15.9.56 +5 CWE-20

TI-2023-10388 CVE-2023-24897 · GHSA-88q2-h5g3-p4pg

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

LOW 38

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01184 Published 2023-06-14 Fixed in 15.9.55, 17.2.16 +15 CWE-122

TI-2023-16317 CVE-2023-33139 · GHSA-cwvc-96pq-qp7w

Visual Studio Information Disclosure Vulnerability

LOW 26

Visual Studio Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00824 Published 2023-06-13 Fixed in 15.9.55, 17.2.16 +6 CWE-125

TI-2023-12848 CVE-2023-28299 · GHSA-j2qf-xc7h-vf5w

Visual Studio Spoofing Vulnerability

LOW 26

Visual Studio Spoofing Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00543 Published 2023-04-11 Fixed in 15.9.54, 17.2.15 +4

TI-2023-12845 CVE-2023-28296 · GHSA-43mv-4mpj-gj4v

Visual Studio Remote Code Execution Vulnerability

LOW 35

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00681 Published 2023-04-11 Fixed in 15.9.54, 17.2.15 +4 CWE-415

TI-2023-09226 CVE-2023-23381 · GHSA-c2r3-vf5h-p5m9

Visual Studio Remote Code Execution Vulnerability

LOW 36

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00436 Published 2023-02-14 Fixed in 12.0.40700.0, 14.0.27555.0 +5 CWE-122

TI-2023-08194 CVE-2023-21815 · GHSA-mj27-g8rm-4w5r

Visual Studio Remote Code Execution Vulnerability

LOW 37

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00523 Published 2023-02-14 Fixed in 12.0.40700.0, 14.0.27555.0 +5 CWE-191

TI-2023-08189 CVE-2023-21808 · GHSA-824j-wqm8-89mj

.NET and Visual Studio Remote Code Execution Vulnerability

LOW 38

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01148 Published 2023-02-14 Fixed in 6.0.14, 7.0.3 +15 CWE-416

Vulnerabilities

Filters