Advisories · Technology

Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8).

Every CVE that names Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-35827 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2022 version 17.0
Not analysed yet 9 Aug 2022
CVE-2022-35826 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Not analysed yet 9 Aug 2022
CVE-2022-35825 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Not analysed yet 9 Aug 2022
CVE-2022-35777 CVE record

CVSS 8.8 High

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
- Code injection
Not analysed yet 9 Aug 2022
CVE-2022-24513 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
Not analysed yet 15 Apr 2022
CVE-2022-24767 CVE record

CVSS 7.8 High

Uncontrolled search path in Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) and others
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.1
- CWE-427
Not analysed yet 12 Apr 2022
CVE-2022-21871 CVE record

CVSS 7.0 High

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2021-43877 CVE record

CVSS 8.8 High

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Not analysed yet 15 Dec 2021
CVE-2021-42319 CVE record

CVSS 4.7 Medium

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Not analysed yet 10 Nov 2021
CVE-2021-42277 CVE record

CVSS 5.5 Medium

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Not analysed yet 10 Nov 2021
CVE-2021-26434 CVE record

CVSS 7.8 High

Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Not analysed yet 15 Sept 2021
CVE-2021-31204 CVE record

CVSS 7.3 High

.NET and Visual Studio Elevation of Privilege Vulnerability
- Microsoft .NET Core 3.1
- Microsoft .NET 5.0
- Privilege escalation
Not analysed yet 11 May 2021
CVE-2021-27068 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Visual Studio Remote Code Execution Vulnerability
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
Not analysed yet 11 May 2021
CVE-2021-28322 CVE record

CVSS 7.8 High

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28321 CVE record

CVSS 7.8 High

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28313 CVE record

CVSS 7.8 High

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27064 CVE record

CVSS 7.8 High

Visual Studio Installer Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Not analysed yet 13 Apr 2021