CVE Tools
Track your stack

Microsoft Visual Studio 2019

139 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Microsoft Visual Studio 2019, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.

Microsoft Visual Studio 2019 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Microsoft Visual Studio 2019 CVEs per month
MonthCVEs
2024-120
2025-014
2025-021
2025-032
2025-040
2025-052
2025-060
2025-075
2025-080
2025-092
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-052
2026-060
2026-070
2026-080
2026-090
2026-100
2026-110

Severity

How the 139 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High10475%
  • Medium3324%
  • Low21%

Latest CVEs

The 15 most recently published vulnerabilities affecting Microsoft Visual Studio 2019.

  1. CVE-2026-32175.NET Core Tampering Vulnerability4.3
  2. CVE-2026-32177.NET Elevation of Privilege Vulnerability7.3
  3. CVE-2025-36855EOL .NET 6.0 Runtime Remote Code Execution Vulnerability8.8
  4. CVE-2025-36853EOL .NET 6.0 Runtime Remote Code Execution Vulnerability7.5
  5. CVE-2025-46334Git GUI malicious command injection on Windows8.6
  6. CVE-2025-48384Git allows arbitrary code execution through broken config quoting8.0
  7. CVE-2025-48385Git alllows arbitrary file writes via bundle-uri parameter injection8.6
  8. CVE-2025-48386Git allows a buffer overflow in 'wincred' credential helper6.3
  9. CVE-2025-49739Visual Studio Elevation of Privilege Vulnerability8.8
  10. CVE-2025-32702Visual Studio Remote Code Execution Vulnerability7.8
  11. CVE-2025-32703Visual Studio Information Disclosure Vulnerability5.5
  12. CVE-2025-25003Visual Studio Elevation of Privilege Vulnerability7.3
  13. CVE-2025-24998Visual Studio Elevation of Privilege Vulnerability7.3
  14. CVE-2025-21206Visual Studio Installer Elevation of Privilege Vulnerability7.3
  15. CVE-2024-50338Carriage-return character in remote URL allows malicious repository to leak credentials in Git Credential Manager7.4

Product grouping is registry-driven, with AI assist and human review. How it works