Advisories · Technology

Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10).

Every CVE that names Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-55240 CVE record

CVSS 7.3 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Broken access control
Not analysed yet 14 Oct 2025
CVE-2025-49739 CVE record

CVSS 8.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-32702 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.10
- Command injection
Not analysed yet 13 May 2025
CVE-2025-32703 CVE record

CVSS 5.5 Medium

Visual Studio Information Disclosure Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Information disclosure
- CWE-1220
Not analysed yet 13 May 2025
CVE-2025-25003 CVE record

CVSS 7.3 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.10
- CWE-427
Not analysed yet 11 Mar 2025
CVE-2025-24998 CVE record

CVSS 7.3 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-427
Not analysed yet 11 Mar 2025
CVE-2025-21206 CVE record

CVSS 7.3 High

Visual Studio Installer Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-427
Not analysed yet 11 Feb 2025
CVE-2025-21178 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-43603 CVE record

CVSS 5.5 Medium

Visual Studio Collector Service Denial of Service Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43590 CVE record

CVSS 7.8 High

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Broken access control
Not analysed yet 8 Oct 2024
CVE-2024-35272 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-30052 CVE record

CVSS 4.7 Medium

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-693
Not analysed yet 11 Jun 2024
CVE-2024-29060 CVE record

CVSS 6.7 Medium

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2024-28938 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28937 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28935 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28934 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28933 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.9
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28930 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28936 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28932 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28931 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28929 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-20656 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
- Path traversal
Not analysed yet 9 Jan 2024
CVE-2023-36759 CVE record

CVSS 6.7 Medium

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36897 CVE record

CVSS 8.1 High

Visual Studio Tools for Office Runtime Spoofing Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-29349 CVE record

CVSS 7.8 High

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
- Microsoft OLE DB Driver 18 for SQL Server
- Microsoft OLE DB Driver 19 for SQL Server
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32028 CVE record

CVSS 7.8 High

Microsoft SQL OLE DB Remote Code Execution Vulnerability
- Microsoft OLE DB Driver 19 for SQL Server
- Microsoft OLE DB Driver 18 for SQL Server
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32027 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Microsoft ODBC Driver 17 for SQL Server on Windows
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32026 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on MacOS
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-32025 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Microsoft ODBC Driver 18 for SQL Server on MacOS
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-29356 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft ODBC Driver 17 for SQL Server on Linux
- Microsoft ODBC Driver 18 for SQL Server on Linux
- Memory corruption
Not analysed yet 16 Jun 2023
CVE-2023-33139 CVE record

CVSS 5.5 Medium

Visual Studio Information Disclosure Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-28299 CVE record

CVSS 5.5 Medium

Visual Studio Spoofing Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
Not analysed yet 11 Apr 2023
CVE-2023-28296 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.2
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28263 CVE record

CVSS 5.5 Medium

Visual Studio Information Disclosure Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-170
Not analysed yet 11 Apr 2023
CVE-2023-28262 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-23381 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2013 Update 5
- Microsoft Visual Studio 2015 Update 3
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21815 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2013 Update 5
- Microsoft Visual Studio 2015 Update 3
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21567 CVE record

CVSS 5.6 Medium

Visual Studio Denial of Service Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Path traversal
Not analysed yet 14 Feb 2023
CVE-2023-21566 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Path traversal
Not analysed yet 14 Feb 2023
CVE-2022-41119 CVE record

CVSS 7.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Not analysed yet 9 Nov 2022
CVE-2022-35827 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2022 version 17.0
Not analysed yet 9 Aug 2022
CVE-2022-35826 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Not analysed yet 9 Aug 2022
CVE-2022-35825 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Not analysed yet 9 Aug 2022
CVE-2022-35777 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
- Code injection
Not analysed yet 9 Aug 2022
CVE-2022-24513 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
Not analysed yet 15 Apr 2022
CVE-2022-24767 CVE record

CVSS 7.8 High

Uncontrolled search path in Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) and others
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.1
- CWE-427
Not analysed yet 12 Apr 2022
CVE-2021-43877 CVE record

CVSS 8.8 High

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Not analysed yet 15 Dec 2021
CVE-2021-42319 CVE record

CVSS 4.7 Medium

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Not analysed yet 10 Nov 2021
CVE-2021-42277 CVE record

CVSS 5.5 Medium

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Not analysed yet 10 Nov 2021
CVE-2021-26434 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Not analysed yet 15 Sept 2021