Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

119 records

Vendor: Microsoft Component: Visual Studio 2019 Clear all filters
TI-2026-34881 CVE-2026-47304 · GHSA-g8r8-53c2-pm3f

.NET Security Feature Bypass Vulnerability

Priority MEDIUM 43

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00286 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-345
TI-2025-34906 CVE-2025-55240 · GHSA-2r4x-qmjj-x52w

Visual Studio Elevation of Privilege Vulnerability

Priority LOW 34

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00376 Published 2025-10-14 Fixed in 15.9.77, 16.11.52 +3 CWE-284
TI-2025-31708 CVE-2025-49739 · GHSA-cf69-g2cj-5w8c

Visual Studio Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00949 Published 2025-07-08 Fixed in 14.0.27564.0, 15.9.75 +5 CWE-59
TI-2025-23767 CVE-2025-32702 · GHSA-rr7h-9jrx-7pvf

Visual Studio Remote Code Execution Vulnerability

Priority LOW 37

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00621 Published 2025-05-13 Fixed in 16.11.47, 17.10.14 +3 CWE-77
TI-2025-23768 CVE-2025-32703 · GHSA-c6v5-8q58-3543

Visual Studio Information Disclosure Vulnerability

Priority LOW 25

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.005 Published 2025-05-13 Fixed in 15.9.73, 16.11.47 +4 CWE-1220
TI-2025-18681 CVE-2025-25003 · GHSA-f4rv-pm79-f3jj

Visual Studio Elevation of Privilege Vulnerability

Priority LOW 34

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00456 Published 2025-03-11 Fixed in 16.11.45, 17.10.12 +3 CWE-427
TI-2025-18676 CVE-2025-24998 · GHSA-565c-x77x-j8h4

Visual Studio Elevation of Privilege Vulnerability

Priority LOW 34

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00456 Published 2025-03-11 Fixed in 15.9.71, 16.11.45 +4 CWE-427
Load more