Microsoft Visual Studio 2019 vulnerabilities
93 known vulnerabilities affecting microsoft/visual_studio_2019.
Total CVEs
93
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1HIGH70MEDIUM21LOW1
Vulnerabilities
Page 1 of 5
CVE-2020-1147P1HIGHCVSS 7.8KEVPoC≥ 16.0, ≤ 16.62020-07-14
CVE-2020-1147 [HIGH] CVE-2020-1147: A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Stu
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
nvd
CVE-2019-1349P2HIGHCVSS 8.8≥ 16.0, < 16.4.12020-01-24
CVE-2019-1349 [HIGH] CWE-20 CVE-2019-1349: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input,
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
nvd
CVE-2019-1350P3HIGHCVSS 8.8≥ 16.0, < 16.4.12020-01-24
CVE-2019-1350 [HIGH] CVE-2019-1350: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input,
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
nvd
CVE-2019-1352P3HIGHCVSS 8.8≥ 16.0, < 16.4.12020-01-24
CVE-2019-1352 [HIGH] CWE-20 CVE-2019-1352: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input,
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.
nvd
CVE-2019-1354P3HIGHCVSS 8.8≥ 16.0, < 16.4.12020-01-24
CVE-2019-1354 [HIGH] CWE-20 CVE-2019-1354: A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input,
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.
nvd
CVE-2026-47304P3CRITICALCVSS 9.8≥ 16.0, ≤ 16.112026-07-14
CVE-2026-47304 [CRITICAL] CWE-345 CVE-2026-47304: Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2025-49739P3HIGHCVSS 8.8≥ 16.0, < 16.11.492025-07-08
CVE-2025-49739 [HIGH] CWE-59 CVE-2025-49739: Improper link resolution before file access ('link following') in Visual Studio allows an unauthoriz
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2024-28934P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28934 [HIGH] CWE-121 CVE-2024-28934: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28933P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28933 [HIGH] CWE-191 CVE-2024-28933: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28932P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28932 [HIGH] CWE-122 CVE-2024-28932: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28931P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28931 [HIGH] CWE-190 CVE-2024-28931: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28936P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28936 [HIGH] CWE-190 CVE-2024-28936: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28929P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28929 [HIGH] CWE-190 CVE-2024-28929: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28935P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28935 [HIGH] CWE-122 CVE-2024-28935: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28930P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28930 [HIGH] CWE-191 CVE-2024-28930: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28937P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28937 [HIGH] CWE-122 CVE-2024-28937: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-28938P3HIGHCVSS 8.8≥ 16.0, < 16.11.352024-04-09
CVE-2024-28938 [HIGH] CWE-125 CVE-2024-28938: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2020-1416P3HIGHCVSS 8.8≥ 16.0, < 16.0.16≥ 16.1, < 16.4.11+1 more2020-07-14
CVE-2020-1416 [HIGH] CWE-269 CVE-2020-1416: An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they loa
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
nvd
CVE-2025-21172P3HIGHCVSS 7.5≥ 16.0, ≤ 16.102025-01-14
CVE-2025-21172 [HIGH] CWE-122 CVE-2025-21172: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2020-1597P3HIGHCVSS 7.5≥ 16.0, ≤ 16.3≥ 16.5, ≤ 16.62020-08-17
CVE-2020-1597 [HIGH] CVE-2020-1597: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attac
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by i
nvd
1 / 5Next →