Microsoft Visual Studio 2015 Update 3 vulnerabilities
25 known vulnerabilities affecting microsoft/microsoft_visual_studio_2015_update_3.
Total CVEs
25
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH23MEDIUM2
Vulnerabilities
Page 1 of 2
CVE-2025-49739P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.27564.02025-07-08
CVE-2025-49739 [HIGH] CWE-59 CVE-2025-49739: Improper link resolution before file access ('link following') in Visual Studio allows an unauthoriz
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2024-20656P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.27560.002024-01-09
CVE-2024-20656 [HIGH] CWE-59 CVE-2024-20656: Visual Studio Elevation of Privilege Vulnerability
Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2020-16856P3HIGHCVSS 7.8≥ 14.0.0, < publication2020-09-11
CVE-2020-16856 [HIGH] CVE-2020-16856: <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects
A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker cou
nvd
CVE-2020-16874P3HIGHCVSS 7.8≥ 14.0.0, < publication2020-09-11
CVE-2020-16874 [HIGH] CVE-2020-16874: <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects
A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker cou
nvd
CVE-2021-28321P3HIGHCVSS 7.8≥ 14.0.0, < publication2021-04-13
CVE-2021-28321 [HIGH] CWE-59 CVE-2021-28321: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
nvd
CVE-2023-24897P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.27555.02023-06-14
CVE-2023-24897 [HIGH] CWE-122 CVE-2023-24897: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2023-21808P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.27555.02023-02-14
CVE-2023-21808 [HIGH] CWE-416 CVE-2023-21808: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2021-28313P3HIGHCVSS 7.8≥ 14.0.0, < publication2021-04-13
CVE-2021-28313 [HIGH] CWE-269 CVE-2021-28313: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
nvd
CVE-2021-28322P3HIGHCVSS 7.8≥ 14.0.0, < publication2021-04-13
CVE-2021-28322 [HIGH] CWE-269 CVE-2021-28322: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
nvd
CVE-2020-1133P3HIGHCVSS 7.8≥ 14.0.0, < publication2020-09-11
CVE-2020-1133 [HIGH] CVE-2020-1133: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improp
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
An attacker could exploit this vulnerability by running a specially crafted application on the victim system.
The update addresses the
nvd
CVE-2021-1651P3HIGHCVSS 7.8≥ 14.0.0, < publication2021-01-12
CVE-2021-1651 [HIGH] CWE-269 CVE-2021-1651: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2021-42277P3HIGHCVSS 7.8≥ 14.0.0, < 27550.002021-11-10
CVE-2021-42277 [HIGH] CWE-269 CVE-2021-42277: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2020-1130P3HIGHCVSS 7.8≥ 14.0.0, < publication2020-09-11
CVE-2020-1130 [HIGH] CVE-2020-1130: <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improp
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
An attacker could exploit this vulnerability by running a specially crafted application on the victim system.
The update addresses the
nvd
CVE-2021-1680P3HIGHCVSS 7.8≥ 14.0.0, < publication2021-01-12
CVE-2021-1680 [HIGH] CWE-269 CVE-2021-1680: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2022-21871P3HIGHCVSS 7.8≥ 14.0.0, < 27551.002022-01-11
CVE-2022-21871 [HIGH] CVE-2022-21871: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
nvd
CVE-2023-33139P4MEDIUMCVSS 5.5≥ 14.0.0, < 14.0.27554.02023-06-14
CVE-2023-33139 [MEDIUM] CWE-125 CVE-2023-33139: Visual Studio Information Disclosure Vulnerability
Visual Studio Information Disclosure Vulnerability
nvd
CVE-2024-43603P4MEDIUMCVSS 5.5≥ 14.0.0, < 14.0.27561.002024-10-08
CVE-2024-43603 [MEDIUM] CWE-59 CVE-2024-43603: Visual Studio Collector Service Denial of Service Vulnerability
Visual Studio Collector Service Denial of Service Vulnerability
nvd
CVE-2022-35825HIGHCVSS 8.8≥ 14.0.0, < 14.0.27552.02022-08-09
CVE-2022-35825 [HIGH] Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
cvelistv5
CVE-2022-35826HIGHCVSS 8.8≥ 14.0.0, < 14.0.27552.02022-08-09
CVE-2022-35826 [HIGH] Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
cvelistv5
CVE-2022-35827HIGHCVSS 8.8≥ 14.0.0, < 14.0.27552.02022-08-09
CVE-2022-35827 [HIGH] Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
cvelistv5
1 / 2Next →