Microsoft Visual Studio 2019 Version 16.11 (Includes 16.0 16.10) vulnerabilities
74 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2019 Version 16.11 (Includes 16.0 16.10), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-41355microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+39
EPSS score20.34%
.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-26434microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+6EPSS score0.89%
Visual Studio Elevation of Privilege VulnerabilityCVE-2021-42277microsoftmicrosoft visual studio 2015 update 3+24EPSS score0.87%
Diagnostics Hub Standard Collector Elevation of Privilege VulnerabilityCVE-2021-42319microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+5EPSS score0.56%
Visual Studio Elevation of Privilege VulnerabilityCVE-2021-43877microsoftasp.net_core+10EPSS score0.73%
ASP.NET Core and Visual Studio Elevation of Privilege VulnerabilityCVE-2025-21176chainguarddotnet-bootstrap-9+36EPSS score2.35%
.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityCVE-2025-21206microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+7EPSS score0.69%
Visual Studio Installer Elevation of Privilege VulnerabilityCVE-2025-21178microsoftmicrosoft visual studio 2015 update 3+9EPSS score1.58%
Visual Studio Remote Code Execution VulnerabilityCVE-2025-21172chainguarddotnet-bootstrap-9+29EPSS score1.81%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2025-55240microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+7EPSS score0.37%
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-25003microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+6EPSS score0.46%
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-24998microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+8EPSS score0.46%
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-49739microsoftmicrosoft visual studio 2015 update 3+10EPSS score0.95%
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.CVE-2025-32702microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+6EPSS score0.62%
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.CVE-2025-32703microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+8EPSS score0.50%
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.CVE-2022-21986fedoraprojectfedora+82EPSS score3.74%
.NET Denial of Service VulnerabilityCVE-2022-41119microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+7EPSS score0.83%
Visual Studio Remote Code Execution VulnerabilityCVE-2022-41032ubuntudotnet6+94EPSS score1.29%
NuGet Client Elevation of Privilege VulnerabilityCVE-2022-41089microsoftmicrosoft .net framework 2.0 service pack 2+23EPSS score1.19%
.NET Framework Remote Code Execution VulnerabilityCVE-2022-29145fedoraprojectfedora+22EPSS score5.43%
.NET and Visual Studio Denial of Service Vulnerability