Microsoft visual studio

This hub aggregates every CVE we track for Microsoft visual studio, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Microsoft visual studio.

• CVE-2024-38095.NET and Visual Studio Denial of Service Vulnerability7.5Jul 9, 2024
• CVE-2023-32032.NET and Visual Studio Elevation of Privilege Vulnerability6.5Jun 13, 2023
• CVE-2023-23381Visual Studio Remote Code Execution Vulnerability7.8Feb 14, 2023
• CVE-2020-1393An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Wi...7.8Jul 14, 2020
• CVE-2020-1293An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege...7.8Jun 9, 2020
• CVE-2020-1278An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege...7.8Jun 9, 2020
• CVE-2020-1257An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege...7.8Jun 9, 2020
• CVE-2020-1203An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Sta...7.8Jun 9, 2020
• CVE-2020-1202An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Sta...7.8Jun 9, 2020
• CVE-2020-0900An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Pri...5.5Apr 15, 2020
• CVE-2020-0810An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnera...7.8Mar 12, 2020
• CVE-2020-0793An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege...7.8Mar 12, 2020
• CVE-2019-1232An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service E...7.8Sep 11, 2019
• CVE-2019-1113A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitra...8.8Jul 29, 2019
• CVE-2019-1079An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'.6.5Jul 15, 2019