Visual Studio 2019

visual_studio_2019

Vendor: Microsoft • 118 CVEs

CVEs (118)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-1108 1Microsoft 7.net .net Core.net Framework+4 more Jun 17, 2026 May 21, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.
CVE-2020-0900 1Microsoft 3Visual Studio 2015 Visual Studio 2017Visual Studio 2019 Jun 17, 2026 Apr 15, 2020 N/A· v4 5.5 MEDIUM· v3 3.6 LOW· v2 An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.
CVE-2020-0899 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Apr 15, 2020 N/A· v4 5.5 MEDIUM· v3 3.6 LOW· v2 An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
CVE-2020-0884 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Mar 12, 2020 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
CVE-2020-0810 1Microsoft 6Visual Studio 2015 Visual Studio 2017Visual Studio 2019+3 more Jun 17, 2026 Mar 12, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability, an attacker wou...Show more An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system.An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.The update addresses the vulnerability by not permitting Diagnostics Hub Standard Collector or the Visual Studio Standard Collector to create files in arbitrary locations., aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'.Show less
CVE-2020-0793 1Microsoft 6Visual Studio 2015 Visual Studio 2017Visual Studio 2019+3 more Jun 17, 2026 Mar 12, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'.
CVE-2020-0789 1Microsoft 1Visual Studio 2019 Jun 17, 2026 Mar 12, 2020 N/A· v4 7.1 HIGH· v3 6.6 MEDIUM· v2 A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.
CVE-2019-1354 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Jan 24, 2020 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350...Show more A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.Show less
CVE-2019-1352 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Jan 24, 2020 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350...Show more A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.Show less
CVE-2019-1351 2Microsoft Opensuse 3Leap Visual Studio 2017Visual Studio 2019 Jun 17, 2026 Jan 24, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.
CVE-2019-1350 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Jan 24, 2020 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352...Show more A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.Show less
CVE-2019-1349 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Jan 24, 2020 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352...Show more A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.Show less
CVE-2019-1486 1Microsoft 2Visual Studio 2019 Visual Studio Live Share Jun 17, 2026 Dec 10, 2019 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerabi...Show more A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.Show less
CVE-2019-1425 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Nov 12, 2019 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'.
CVE-2019-1232 1Microsoft 6Visual Studio Visual Studio 2017Visual Studio 2019+3 more Jun 17, 2026 Sep 11, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege V...Show more An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.Show less
CVE-2019-1211 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Aug 14, 2019 N/A· v4 7.3 HIGH· v3 3.7 LOW· v2 An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another...Show more An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated attacker would need to modify Git configuration files on a system prior to a full installation of the application. The attacker would then need to convince another user on the system to execute specific Git commands. The update addresses the issue by changing the permissions required to edit configuration files.Show less
CVE-2019-1077 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Jun 17, 2026 Jul 15, 2019 N/A· v4 5.0 MEDIUM· v3 6.6 MEDIUM· v2 An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.
CVE-2019-0727 1Microsoft 6Visual Studio Visual Studio 2017Visual Studio 2019+3 more Jun 17, 2026 May 16, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker wou...Show more An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.Show less

Previous 1 2 3 4 56