Filtered by vendor Microsoft Subscriptions
Filtered by product Visual Studio Subscriptions
Total 56 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-2502 1 Microsoft 27 .net Framework, Excel Viewer, Expression Web and 24 more 2025-04-09 8.1 High
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka "GDI+ TIFF Buffer Overflow Vulnerability."
CVE-2006-4494 1 Microsoft 1 Visual Studio 2025-04-03 N/A
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll.
CVE-2000-0162 1 Microsoft 3 Ie, Internet Explorer, Visual Studio 2025-04-03 N/A
The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
CVE-2001-0153 1 Microsoft 2 Visual Basic, Visual Studio 2025-04-03 N/A
Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.
CVE-2006-1043 1 Microsoft 2 Visual Interdev, Visual Studio 2025-04-03 N/A
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln).
CVE-2024-43603 1 Microsoft 4 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 1 more 2025-01-30 5.5 Medium
Visual Studio Collector Service Denial of Service Vulnerability
CVE-2022-35777 1 Microsoft 4 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 1 more 2025-01-02 8.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35827 1 Microsoft 4 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 1 more 2025-01-02 8.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35826 1 Microsoft 4 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 1 more 2025-01-02 8.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35825 1 Microsoft 4 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 1 more 2025-01-02 8.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2023-33139 1 Microsoft 4 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 1 more 2025-01-01 5.5 Medium
Visual Studio Information Disclosure Vulnerability
CVE-2023-24897 1 Microsoft 18 .net, .net Framework, Visual Studio and 15 more 2025-01-01 7.8 High
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2021-42277 1 Microsoft 17 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 14 more 2024-11-21 5.5 Medium
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-3146 2 Dolby, Microsoft 5 Audio X2, Exchange Server, Visual C\+\+ and 2 more 2024-11-21 7.8 High
The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges.
CVE-2021-28322 1 Microsoft 13 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 10 more 2024-11-21 7.8 High
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28321 1 Microsoft 13 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 10 more 2024-11-21 7.8 High
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28313 1 Microsoft 13 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 10 more 2024-11-21 7.8 High
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-1680 1 Microsoft 15 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 12 more 2024-11-21 7.8 High
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-1651 1 Microsoft 14 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 11 more 2024-11-21 7.8 High
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2020-1393 1 Microsoft 6 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 3 more 2024-11-21 7.8 High
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1418.