Microsoft Visual Studio 2015 Update 3

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical1high1medium0low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20656US	—	3.95% (90th)	Exploit	14.0.27560.00	2024-01-09	2 versions
CVE-2022-35827US	—	2.23% (83rd)	—	14.0.27552.0	2022-08-09	2 versions
CVE-2022-35826US	—	2.23% (83rd)	—	14.0.27552.0	2022-08-09	2 versions
CVE-2022-35825US	—	2.23% (83rd)	—	14.0.27552.0	2022-08-09	2 versions
CVE-2022-35777US	—	2.10% (82nd)	—	14.0.27552.0	2022-08-09	2 versions
CVE-2023-36796US	—OT elevated	1.23% (69th)	—	14.0.27559.0	2023-09-12	2 versions
CVE-2023-24897US	—	1.18% (68th)	—	14.0.27555.0	2023-06-14	2 versions
CVE-2023-21808US	—OT elevated	1.15% (67th)	—	14.0.27555.0	2023-02-14	2 versions
CVE-2025-49739US	—	0.95% (61st)	—	14.0.27564.0	2025-07-08	2 versions
CVE-2021-42277US	medium4.6	0.87% (59th)	—	27550.00	2021-11-10	2 versions
CVE-2023-33139US	—	0.82% (57th)	—	14.0.27554.0	2023-06-14	2 versions
CVE-2024-43603US	—	0.77% (55th)	—	14.0.27561.00	2024-10-08	2 versions
CVE-2022-21871US	high7.8	0.68% (52nd)	—	27551.00	2022-01-11	2 versions
CVE-2023-21815US	—	0.52% (44th)	—	14.0.27555.0	2023-02-14	2 versions
CVE-2023-23381US	—	0.44% (38th)	—	14.0.27555.0	2023-02-14	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.