Microsoft Microsoft Visual Studio

Name: Microsoft Microsoft Visual Studio
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical17high6medium0low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-8172US	high7.8	33.6% (98th)	Exploit	no fix	2018-07-11	7 versions
CVE-2018-0952US	high7.8	6.23% (94th)	Exploit	no fix	2018-08-15	3 versions
CVE-2019-0546US	high7.8	16.2% (97th)	—	no fix	2019-01-08	≤ 2017 version 15.9
CVE-2019-0613US	high8.8	15.4% (97th)	—	no fix	2019-03-05	≤ 2017
CVE-2019-1113US	high8.8	10.00% (96th)	—	no fix	2019-07-15	≤ 2017
CVE-2019-0537US	medium5.5	7.61% (95th)	—	no fix	2019-01-08	2 versions
CVE-2019-1079US	medium6.5	6.12% (93rd)	—	no fix	2019-07-15	4 versions
CVE-2018-1037US	medium4.3	5.82% (93rd)	—	no fix	2018-04-12	7 versions
CVE-2019-0657US	medium5.9	4.52% (91st)	—	no fix	2019-03-05	≤ 2017
CVE-2019-0757US	medium6.5	2.70% (86th)	—	no fix	2019-04-09	≤ 2017 for Mac
CVE-2018-8232US	high7.8	1.17% (67th)	—	no fix	2018-07-11	3 versions
CVE-2019-0727US	high7.8	1.05% (64th)	—	no fix	2019-05-16	≤ 2015 Update 3
CVE-2020-0810US	high7.8	1.00% (63rd)	—	no fix	2020-03-12	≤ 2015 Update 3
CVE-2018-8599US	high7.8	1.00% (63rd)	—	no fix	2018-12-12	3 versions
CVE-2020-1203US	high7.8	0.95% (61st)	—	no fix	2020-06-09	≤ 2015 Update 3
CVE-2020-1202US	high7.8	0.95% (61st)	—	no fix	2020-06-09	≤ 2015 Update 3
CVE-2020-1393US	high7.8	0.92% (60th)	—	no fix	2020-07-14	≤ 2015 Update 3
CVE-2020-1293US	high7.8	0.84% (58th)	—	no fix	2020-06-09	≤ 2015 Update 3
CVE-2020-1278US	high7.8	0.84% (58th)	—	no fix	2020-06-09	≤ 2015 Update 3
CVE-2020-1257US	high7.8	0.84% (58th)	—	no fix	2020-06-09	≤ 2015 Update 3
CVE-2019-1232US	high7.8	0.83% (57th)	—	no fix	2019-09-11	≤ 2015 Update 3
CVE-2020-0900US	medium5.5	0.81% (57th)	—	no fix	2020-04-15	≤ 2015 Update 3
CVE-2020-0793US	high7.8	0.79% (56th)	—	no fix	2020-03-12	≤ 2015 Update 3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management11 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-264CWE-2644 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-19CWE-191 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-273Improper Check for Dropped Privileges1 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan