Microsoft Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
unpatched
0
critical
by severity
0critical7high21medium4low
updated 2026-10-27
01
vulnerabilities (32)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2021-27068US | medium6.5 | — |
| CVE-2021-36952US | medium6.8 | — |
| CVE-2021-26701US | high7.5 | — |
| CVE-2020-1597US | high7.5 | — |
| CVE-2021-1723US | medium5.0 | — |
| CVE-2021-31957US | medium5.0 | — |
| CVE-2020-16856US | high9.3 | — |
| CVE-2020-16874US | high9.3 | — |
| CVE-2021-26423US | medium5.0 | — |
| CVE-2022-24464US | medium5.0 | — |
| CVE-2021-1721US | medium4.3 | — |
| CVE-2020-17156US | medium6.8 | — |
| CVE-2021-1639US | medium6.8 | — |
| CVE-2021-34485US | low2.1 | — |
| CVE-2022-24512US | medium6.8 | — |
| CVE-2021-28321US | medium4.6 | — |
| CVE-2021-34532US | low2.1 | — |
| CVE-2021-31204US | medium4.6 | — |
| CVE-2021-28322US | medium4.6 | — |
| CVE-2021-28313US | medium4.6 | — |
| CVE-2020-1133US | medium4.6 | — |
| CVE-2021-26434US | high7.2 | — |
| CVE-2021-42277US | medium4.6 | — |
| CVE-2021-1651US | high7.2 | — |
| CVE-2020-17100US | low2.1 | — |
| CVE-2020-1130US | medium4.6 | — |
| CVE-2022-24513US | medium4.6 | — |
| CVE-2021-43877US | medium4.6 | — |
| CVE-2021-1680US | medium4.6 | — |
| CVE-2022-21871US | high7.8 | — |
| CVE-2021-27064US | medium4.6 | — |
| CVE-2021-42319US | low2.1 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-269Improper Privilege Management13 CVEs
- CWE-20Improper Input Validation8 CVEs
- CWE-264CWE-2647 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
- CWE-400Uncontrolled Resource Consumption3 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-1173Improper Use of Validation Framework1 CVEs
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)32 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan