Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Visual_studio_2017
(Microsoft)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 84 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2020-03-12 | CVE-2020-0884 | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'. | Visual_studio_2017, Visual_studio_2019 | N/A | ||
2019-11-12 | CVE-2019-1425 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'. | Visual_studio_2017, Visual_studio_2019 | N/A | ||
2019-07-15 | CVE-2019-1113 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. | \.net_framework, Visual_studio_2017 | 8.8 | ||
2019-07-15 | CVE-2019-1077 | An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'. | Visual_studio_2017, Visual_studio_2019 | 5.0 | ||
2019-04-09 | CVE-2019-0809 | A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka 'Visual Studio Remote Code Execution Vulnerability'. | Visual_studio_2017 | 7.8 | ||
2019-03-05 | CVE-2019-0657 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. | \.net_core, \.net_framework, Powershell_core, Visual_studio_2017 | 5.9 | ||
2019-03-05 | CVE-2019-0613 | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'. | \.net_framework, Visual_studio_2017 | 8.8 | ||
2019-01-08 | CVE-2019-0546 | A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio. | Visual_studio_2017 | 7.8 | ||
2018-07-10 | CVE-2018-8232 | A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual Studio. | Visual_studio_2017 | 7.8 | ||
2018-08-15 | CVE-2018-0952 | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers. | Visual_studio_2015, Visual_studio_2017, Windows_10, Windows_server_2016 | 7.8 |