Advisories · Technology

Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8).

Every CVE that names Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-0900 CVE record

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privi…
- Microsoft Visual Studio 2019 version 16.5
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
Not analysed yet 15 Apr 2020
CVE-2020-0899 CVE record

An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
- Microsoft Visual Studio 2019 version 16.5
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
Not analysed yet 15 Apr 2020
CVE-2020-0884 CVE record

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
- Microsoft Visual Studio 2019
Not analysed yet 12 Mar 2020
CVE-2020-0810 CVE record

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerabi…
- Microsoft Windows
- Microsoft Windows Server
Not analysed yet 12 Mar 2020
CVE-2020-0793 CVE record

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege V…
- Microsoft Windows
- Microsoft Windows Server
Not analysed yet 12 Mar 2020
CVE-2019-1354 CVE record

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
Not analysed yet 24 Jan 2020
CVE-2019-1352 CVE record

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
Not analysed yet 24 Jan 2020
CVE-2019-1351 CVE record

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
- Microsoft Visual Studio 2017
Not analysed yet 24 Jan 2020
CVE-2019-1350 CVE record

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
Not analysed yet 24 Jan 2020
CVE-2019-1349 CVE record

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.
- Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
- Microsoft Visual Studio 2017
Not analysed yet 24 Jan 2020