visual studio 2017 · threatengine.sh

Home/Product/microsoft visual studio 2017

Product

microsoft visual studio 2017

92 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 15.0 and < 15.9.77

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

>= 15.0 and < 15.9.75

Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privile

>= 15.0 and < 15.9.73

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

>= 15.0 and < 15.9.71

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

>= 15.0 and < 15.9.70

Visual Studio Installer Elevation of Privilege Vulnerability

>= 15.0 and < 15.9.69

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.69

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

>= 15.0 and <= 15.8

.NET and Visual Studio Remote Code Execution Vulnerability

>= 15.0.0 and < 15.9.67

Visual Studio Collector Service Denial of Service Vulnerability

>= 15.0 and < 15.9.67

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

>= 15.0 and < 15.9.63

Visual Studio Elevation of Privilege Vulnerability

>= 15.0 and < 15.9.59

Visual Studio Elevation of Privilege Vulnerability

>= 15.0 and < 15.9.57

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.57

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.57

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.57

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.56

Visual Studio Tools for Office Runtime Spoofing Vulnerability

>= 15.0 and <= 15.8

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.8

Visual Studio Information Disclosure Vulnerability

>= 15.0 and < 15.9.54

Visual Studio Spoofing Vulnerability

>= 15.0 and < 15.9.54

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.52

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.52

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.51

.NET and Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.52

Visual Studio Denial of Service Vulnerability

>= 15.0 and < 15.9.52

Visual Studio Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and <= 15.9

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.48

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and < 15.9.46

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

>= 15.0 and < 15.9.44

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Visual Studio Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and <= 15.9

Visual Studio Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

.NET Core and Visual Studio Information Disclosure Vulnerability

>= 15.0 and <= 15.9

.NET Core and Visual Studio Denial of Service Vulnerability

>= 15.0 and <= 15.9

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Visual Studio Installer Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

.NET Core and Visual Studio Denial of Service Vulnerability

>= 15.0 and <= 15.9

Visual Studio Code Remote Code Execution Vulnerability

>= 15.0 and <= 15.8

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

>= 15.0 and < 15.9

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

>= 15.0 and <= 15.9

Visual Studio Remote Code Execution Vulnerability

>= 15.0 and <= 15.9

Visual Studio Tampering Vulnerability

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return th

>= 15.0 and < 15.9.27

<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations.

>= 15.0 and < 15.9.27

<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations.

>= 15.0 and <= 15.8

<p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who suc

>= 15.0 and <= 15.8

<p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who suc

>= 15.0 and <= 15.8

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited

>= 15.0 and < 15.9.25

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka '

>= 15.0 and < 15.9.25

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanit

>= 15.0 and <= 15.9

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to

>= 15.0 and <= 15.9

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operati

>= 15.0 and <= 15.9

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operati

>= 15.0 and <= 15.9

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operati

>= 15.0 and <= 15.9

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector

>= 15.0 and <= 15.9

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector

>= 15.1 and <= 15.9

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vu

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET F

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operatio

An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, a

>= 15.1 and <= 15.8

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft V

>= 15.1 and <= 15.9

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector

>= 15.1 and <= 15.9

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operati

>= 15.0 and < 15.9.18

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Rem

>= 15.0 and < 15.9.18

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Rem

>= 15.0 and < 15.9.18

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tam

>= 15.0 and < 15.9.18

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Rem

>= 15.0 and < 15.9.18

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Rem

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived f

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain

An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An atta

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Vi

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector

A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input befor

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modi

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visu

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the sou

A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C+

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations

A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tamperin

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a fil

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory wh

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin