CveMateVulnerability intelligence

Microsoft Visual Studio vulnerabilities, page 2

56 vulnerabilities

Known vulnerabilities in Microsoft Visual Studio, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2020-1202microsoftmicrosoft visual studio+246y ago09-06-2020 19:43

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1203.CVE-2020-1278microsoftmicrosoft visual studio+246y ago09-06-2020 19:43

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1293.CVE-2020-1393microsoftmicrosoft visual studio+246y ago14-07-2020 22:54

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1418.CVE-2020-1257microsoftmicrosoft visual studio+246y ago09-06-2020 19:43

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1278, CVE-2020-1293.CVE-2014-3802microsoftdebug_interface_access_software_development_kit+112y ago20-05-2014 23:00

msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.CVE-2001-0153microsoftvisual_basic+125y ago07-05-2001 04:00

Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.CVE-2008-3704microsoftvisual_basic+318y ago18-08-2008 19:00

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."CVE-2022-35827microsoftmicrosoft visual studio 2012 update 5+114y ago09-08-2022 20:12

Visual Studio Remote Code Execution Vulnerability CVE-2022-35777microsoftmicrosoft visual studio 2012 update 5+114y ago09-08-2022 19:59

Visual Studio Remote Code Execution Vulnerability CVE-2022-35825microsoftmicrosoft visual studio 2012 update 5+114y ago09-08-2022 20:12

Visual Studio Remote Code Execution Vulnerability CVE-2022-35826microsoftmicrosoft visual studio 2012 update 5+114y ago09-08-2022 20:12

Visual Studio Remote Code Execution Vulnerability CVE-2012-0008microsoftvisual_studio14y ago13-03-2012 21:00

Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."CVE-2000-0162microsoftie+226y ago22-03-2000 05:00

The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.CVE-2011-1280microsoftoffice_infopath+315y ago16-06-2011 20:21

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."CVE-2011-1976microsoftreport_viewer+115y ago10-08-2011 21:16

Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."CVE-2010-3190appleitunes+316y ago31-08-2010 19:25

Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."CVE-2024-20656microsoftmicrosoft visual studio 2015 update 3+92y ago09-01-2024 17:57

Visual Studio Elevation of Privilege Vulnerability CVE-2024-43603microsoftmicrosoft visual studio 2015 update 3+102y ago08-10-2024 17:36

Visual Studio Collector Service Denial of Service Vulnerability CVE-2009-2528microsoftexcel_viewer+1817y ago14-10-2009 10:00

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."CVE-2009-2503microsoftexcel_viewer+1817y ago14-10-2009 10:00

GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka "GDI+ TIFF Memory Corruption Vulnerability."