Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)

Name: Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical24high19medium4low

updated 2026-10-27

vulnerabilities (47)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1147US	high7.8OT critical	94.0% (100th)	KEV	no fix	2020-07-14	≤ unspecified
CVE-2019-1351US	high7.5	8.72% (95th)	Exploit	no fix	2020-01-24	≤ unspecified
CVE-2021-27068US	medium6.5	53.6% (99th)	—	publication	2021-05-11	16.0 → publication
CVE-2021-36952US	medium6.8	51.5% (99th)	—	16.4.26	2021-09-15	16.0 → 16.4.26
CVE-2019-1349US	high8.8	34.0% (98th)	—	no fix	2020-01-24	≤ unspecified
CVE-2021-26701US	high7.5	30.1% (98th)	—	publication	2021-02-25	16.0 → publication
CVE-2019-1350US	high8.8	25.7% (98th)	—	no fix	2020-01-24	≤ unspecified
CVE-2019-1352US	high8.8	24.0% (98th)	—	no fix	2020-01-24	≤ unspecified
CVE-2019-1354US	high8.8	22.6% (98th)	—	no fix	2020-01-24	≤ unspecified
CVE-2020-1597US	high7.5	6.56% (94th)	—	publication	2020-08-17	16.0 → publication
CVE-2020-1108US	high7.5	6.46% (94th)	—	no fix	2020-05-21	≤ unspecified
CVE-2020-1416US	high8.8	5.86% (93rd)	—	no fix	2020-07-14	≤ unspecified
CVE-2020-1161US	high7.5	5.31% (93rd)	—	no fix	2020-05-21	≤ unspecified
CVE-2021-1723US	medium5.0	5.30% (93rd)	—	publication	2021-01-12	16.0 → publication
CVE-2021-31957US	medium5.0	5.14% (92nd)	—	16.4.23	2021-06-08	16.0 → 16.4.23
CVE-2020-16856US	high9.3	4.37% (91st)	—	publication	2020-09-11	16.0 → publication
CVE-2020-16874US	high9.3	4.29% (91st)	—	publication	2020-09-11	16.0 → publication
CVE-2021-26423US	medium5.0	3.90% (90th)	—	16.4.25	2021-08-12	16.0 → 16.4.25
CVE-2021-1721US	medium4.3	3.34% (89th)	—	publication	2021-02-25	16.0 → publication
CVE-2020-17156US	medium6.8	3.11% (88th)	—	publication	2020-12-10	16.0 → publication
CVE-2021-1639US	medium6.8	2.11% (82nd)	—	publication	2021-02-25	16.0 → publication
CVE-2021-34485US	low2.1	2.07% (81st)	—	16.4.25	2021-08-12	16.0 → 16.4.25
CVE-2020-0884US	low3.7OT elevated	1.67% (77th)	—	no fix	2020-03-12	≤ unspecified
CVE-2019-1486US	medium6.1	1.59% (75th)	—	no fix	2019-12-10	≤ unspecified
CVE-2021-28321US	medium4.6	1.28% (70th)	—	publication	2021-04-13	16.0 → publication
CVE-2021-34532US	low2.1	1.22% (68th)	—	16.4.25	2021-08-12	16.0 → 16.4.25
CVE-2021-31204US	medium4.6	1.19% (68th)	—	publication	2021-05-11	16.0 → publication
CVE-2021-28322US	medium4.6	1.04% (64th)	—	publication	2021-04-13	16.0 → publication
CVE-2021-28313US	medium4.6	1.04% (64th)	—	publication	2021-04-13	16.0 → publication
CVE-2020-0810US	high7.8	1.00% (63rd)	—	no fix	2020-03-12	≤ unspecified
CVE-2020-1133US	medium4.6	0.98% (62nd)	—	publication	2020-09-11	16.0 → publication
CVE-2020-1203US	high7.8	0.95% (61st)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1202US	high7.8	0.95% (61st)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1393US	high7.8	0.92% (60th)	—	no fix	2020-07-14	≤ unspecified
CVE-2021-26434US	high7.2	0.89% (59th)	—	16.4.26	2021-09-15	16.0 → 16.4.26
CVE-2020-0789US	high7.1	0.86% (58th)	—	no fix	2020-03-12	≤ unspecified
CVE-2020-1293US	high7.8	0.84% (58th)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1278US	high7.8	0.84% (58th)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1257US	high7.8	0.84% (58th)	—	no fix	2020-06-09	≤ unspecified
CVE-2021-1651US	high7.2	0.82% (57th)	—	publication	2021-01-12	16.0 → publication
CVE-2020-17100US	low2.1	0.81% (57th)	—	publication	2020-11-11	16.0 → publication
CVE-2020-0900US	medium5.5	0.81% (57th)	—	no fix	2020-04-15	≤ unspecified
CVE-2020-0899US	medium5.5	0.81% (57th)	—	no fix	2020-04-15	≤ unspecified
CVE-2020-0793US	high7.8	0.79% (56th)	—	no fix	2020-03-12	≤ unspecified
CVE-2020-1130US	medium4.6	0.78% (56th)	—	publication	2020-09-11	16.0 → publication
CVE-2021-1680US	medium4.6	0.73% (54th)	—	publication	2021-01-12	16.0 → publication
CVE-2021-27064US	medium4.6	0.59% (48th)	—	publication	2021-04-13	16.0 → publication

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management21 CVEs
CWE-20Improper Input Validation15 CVEs
CWE-264CWE-2644 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)47 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan