microsoft visual studio 2019 vulnerabilities (CVE)

8.1High

CVE-2026-47304 4 months ago

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft .NET Framework 3.5

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

7.3High

CVE-2025-55240 1 year ago

Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

8.8High

CVE-2025-49739 1 year ago

Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2015 Update 3; Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10

Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.

7.8High

CVE-2025-32702 1 year ago

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12; Microsoft Microsoft Visual Studio 2022 version 17.13

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.

5.5Medium

CVE-2025-32703 1 year ago

Visual Studio Information Disclosure Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

7.3High

CVE-2025-25003 1 year ago

Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12; Microsoft Microsoft Visual Studio 2022 version 17.13

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

7.3High

CVE-2025-24998 1 year ago

Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

7.3High

CVE-2025-21206 1 year ago

Visual Studio Installer Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

Visual Studio Installer Elevation of Privilege Vulnerability

7.5High

CVE-2025-21172 1 year ago

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2015 Update 3; Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)

.NET and Visual Studio Remote Code Execution Vulnerability

1.8%EPSS

8.8High

CVE-2025-21178 1 year ago

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2015 Update 3; Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.10

Visual Studio Remote Code Execution Vulnerability

1.6%EPSS

8.8High

CVE-2025-21176 1 year ago

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

2.4%EPSS

8.8High

CVE-2024-35272 2 years ago

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8); Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10); Microsoft Microsoft Visual Studio 2022 version 17.6; Microsoft Microsoft Visual Studio 2022 version 17.8

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

1.9%EPSS

8.8High

CVE-2024-28938 2 years ago

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 for (CU 12); Microsoft Microsoft SQL Server 2019 (CU 25); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (GDR)