Microsoft Visual Studio 2019 vulnerabilities

92 known vulnerabilities affecting microsoft/visual_studio_2019.

Total CVEs
92
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
HIGH70MEDIUM21LOW1

Vulnerabilities

Page 3 of 5
CVE-2021-43877HIGHCVSS 7.8v16.7v16.9+1 more2021-12-15
CVE-2021-43877 [HIGH] CVE-2021-43877: ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2021-42277HIGHCVSS 7.8≥ 16.0, ≤ 16.112021-11-10
CVE-2021-42277 [MEDIUM] CWE-269 CVE-2021-42277: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2021-42319MEDIUMCVSS 5.5≥ 16.0, ≤ 16.112021-11-10
CVE-2021-42319 [MEDIUM] CWE-269 CVE-2021-42319: Visual Studio Elevation of Privilege Vulnerability Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2021-41355MEDIUMCVSS 5.7≥ 16.0, ≤ 16.112021-10-13
CVE-2021-41355 [MEDIUM] CVE-2021-41355: .NET Core and Visual Studio Information Disclosure Vulnerability .NET Core and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2021-26434HIGHCVSS 7.8≥ 16.0, ≤ 16.112021-09-15
CVE-2021-26434 [HIGH] CWE-732 CVE-2021-26434: Visual Studio Elevation of Privilege Vulnerability Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2021-26423HIGHCVSS 7.5≥ 16.0, ≤ 16.10v8.102021-08-12
CVE-2021-26423 [HIGH] CVE-2021-26423: .NET Core and Visual Studio Denial of Service Vulnerability .NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2021-34532MEDIUMCVSS 5.5≥ 16.0, ≤ 16.10v8.102021-08-12
CVE-2021-34532 [MEDIUM] CVE-2021-34532: ASP.NET Core and Visual Studio Information Disclosure Vulnerability ASP.NET Core and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2021-34485MEDIUMCVSS 5.5≥ 16.0, ≤ 16.102021-08-12
CVE-2021-34485 [MEDIUM] CVE-2021-34485: .NET Core and Visual Studio Information Disclosure Vulnerability .NET Core and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2021-31204HIGHCVSS 7.8≥ 16.0, < 16.4.22≥ 16.5.0, < 16.7.15+2 more2021-05-11
CVE-2021-31204 [HIGH] CVE-2021-31204: .NET and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2021-28321HIGHCVSS 7.8≥ 16.0, ≤ 16.7≥ 16.8, ≤ 16.92021-04-13
CVE-2021-28321 [HIGH] CWE-59 CVE-2021-28321: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
nvd
CVE-2021-28313HIGHCVSS 7.8≥ 16.0, ≤ 16.7≥ 16.8, ≤ 16.92021-04-13
CVE-2021-28313 [HIGH] CWE-269 CVE-2021-28313: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
nvd
CVE-2021-28322HIGHCVSS 7.8≥ 16.0, ≤ 16.7≥ 16.8, ≤ 16.92021-04-13
CVE-2021-28322 [HIGH] CWE-269 CVE-2021-28322: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
nvd
CVE-2021-27064HIGHCVSS 7.8≥ 16.0, ≤ 16.4≥ 16.6, ≤ 16.7+1 more2021-04-13
CVE-2021-27064 [HIGH] CVE-2021-27064: Visual Studio Installer Elevation of Privilege Vulnerability Visual Studio Installer Elevation of Privilege Vulnerability
nvd
CVE-2021-1639HIGHCVSS 7.8≥ 16.0, ≤ 16.82021-02-25
CVE-2021-1639 [HIGH] CVE-2021-1639: Visual Studio Code Remote Code Execution Vulnerability Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-1721MEDIUMCVSS 6.5≥ 16.0, ≤ 16.82021-02-25
CVE-2021-1721 [MEDIUM] CVE-2021-1721: .NET Core and Visual Studio Denial of Service Vulnerability .NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2021-1723HIGHCVSS 7.5≥ 16.0, ≤ 16.82021-01-12
CVE-2021-1723 [HIGH] CVE-2021-1723: ASP.NET Core and Visual Studio Denial of Service Vulnerability ASP.NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2021-1651HIGHCVSS 7.8≥ 16.0, < 16.4≥ 16.5, < 16.7+1 more2021-01-12
CVE-2021-1651 [HIGH] CWE-269 CVE-2021-1651: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2021-1680HIGHCVSS 7.8≥ 16.0, ≤ 16.7.0v16.82021-01-12
CVE-2021-1680 [HIGH] CWE-269 CVE-2021-1680: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2020-26870MEDIUMCVSS 6.1v16.0v16.4+2 more2020-10-07
CVE-2020-26870 [MEDIUM] CWE-79 CVE-2020-26870: Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.
nvd
CVE-2020-8927MEDIUMCVSS 6.5≥ 16.0, ≤ 16.112020-09-15
CVE-2020-8927 [MEDIUM] CWE-130 CVE-2020-8927: A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recomm
nvd
← Previous3 / 5Next →
Microsoft Visual Studio 2019 vulnerabilities | cvebase