Microsoft Visual Studio 2019 vulnerabilities
93 known vulnerabilities affecting microsoft/visual_studio_2019.
Total CVEs
93
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1HIGH70MEDIUM21LOW1
Vulnerabilities
Page 5 of 5
CVE-2019-1486P4MEDIUMCVSS 6.1≥ 16.0, ≤ 16.42019-12-10
CVE-2019-1486 [MEDIUM] CWE-601 CVE-2019-1486: A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share s
A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.
nvd
CVE-2020-0789P4HIGHCVSS 7.1≥ 16.0, ≤ 16.42020-03-12
CVE-2020-0789 [HIGH] CWE-59 CVE-2020-0789: A denial of service vulnerability exists when the Visual Studio Extension Installer Service improper
A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.
nvd
CVE-2022-30184P4MEDIUMCVSS 5.5≥ 16.0, < 16.9.22≥ 16.10, < 16.11.6+1 more2022-06-15
CVE-2022-30184 [MEDIUM] CWE-200 CVE-2022-30184: .NET and Visual Studio Information Disclosure Vulnerability
.NET and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2019-1077P4MEDIUMCVSS 5.0v16.0v16.12019-07-15
CVE-2019-1077 [MEDIUM] CVE-2019-1077: An elevation of privilege vulnerability exists when the Visual Studio updater service improperly han
An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.
nvd
CVE-2020-0899P4MEDIUMCVSS 5.5v16.0v16.4+1 more2020-04-15
CVE-2020-0899 [MEDIUM] CVE-2020-0899: An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improper
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
nvd
CVE-2020-0900P4MEDIUMCVSS 5.5v16.0v16.4+1 more2020-04-15
CVE-2020-0900 [MEDIUM] CVE-2020-0900: An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service im
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.
nvd
CVE-2021-34485P4MEDIUMCVSS 5.5≥ 16.0, ≤ 16.102021-08-12
CVE-2021-34485 [MEDIUM] CVE-2021-34485: .NET Core and Visual Studio Information Disclosure Vulnerability
.NET Core and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2021-34532P4MEDIUMCVSS 5.5≥ 16.0, ≤ 16.10v8.102021-08-12
CVE-2021-34532 [MEDIUM] CVE-2021-34532: ASP.NET Core and Visual Studio Information Disclosure Vulnerability
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2023-28263P4MEDIUMCVSS 5.5≥ 16.0, < 16.11.262023-04-11
CVE-2023-28263 [MEDIUM] CWE-170 CVE-2023-28263: Visual Studio Information Disclosure Vulnerability
Visual Studio Information Disclosure Vulnerability
nvd
CVE-2021-42319P4MEDIUMCVSS 5.5≥ 16.0, ≤ 16.112021-11-10
CVE-2021-42319 [MEDIUM] CWE-269 CVE-2021-42319: Visual Studio Elevation of Privilege Vulnerability
Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2023-33139P4MEDIUMCVSS 5.5≥ 16.0, ≤ 16.10≥ 16.11, < 16.11.272023-06-14
CVE-2023-33139 [MEDIUM] CWE-125 CVE-2023-33139: Visual Studio Information Disclosure Vulnerability
Visual Studio Information Disclosure Vulnerability
nvd
CVE-2024-43603P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.11.412024-10-08
CVE-2024-43603 [MEDIUM] CWE-59 CVE-2024-43603: Visual Studio Collector Service Denial of Service Vulnerability
Visual Studio Collector Service Denial of Service Vulnerability
nvd
CVE-2020-0884P4LOWCVSS 3.7≥ 16.0, ≤ 16.32020-03-12
CVE-2020-0884 [LOW] CWE-319 CVE-2020-0884: A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not se
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
nvd
← Previous5 / 5