Known vulnerabilities in Visual Studio

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 246
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 246 known vulnerabilities: 2 critical, 81 high, 82 medium, 81 low Critical High Medium Low

Vulnerabilities (246)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138159 - Protection Mechanism Failure
CVE-2026-47305		 CWE-693 Low
No
No
 17.12.22 17.07.2026 SB2026071706
#VU138088 - Improper Encoding or Escaping of Output
CVE-2026-50659		 CWE-116 Low
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU138087 - Allocation of Resources Without Limits or Throttling
CVE-2026-50651		 CWE-770 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU138086 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-50650		 CWE-94 Low
No
No
 17.12.22 17.07.2026 SB2026071706
#VU138085 - Deserialization of Untrusted Data
CVE-2026-50649		 CWE-502 Low
No
No
 17.12.22 17.07.2026 SB2026071706
#VU138084 - Allocation of Resources Without Limits or Throttling
CVE-2026-50648		 CWE-770 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU138082 - Protection Mechanism Failure
CVE-2026-50646		 CWE-693 Low
No
No
 17.12.22 17.07.2026 SB2026071706
#VU138081 - Improper Access Control
CVE-2026-50528		 CWE-284 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU138080 - Stack-based buffer overflow
CVE-2026-50527		 CWE-121 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU138079 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-50526		 CWE-59 Low
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU138078 - Allocation of Resources Without Limits or Throttling
CVE-2026-50525		 CWE-770 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU137960 - Improper Verification of Cryptographic Signature
CVE-2026-47304		 CWE-347 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU137945 - Improper input validation
CVE-2026-50524		 CWE-20 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
#VU137927 - Allocation of Resources Without Limits or Throttling
CVE-2026-47302		 CWE-770 Medium
No
No
 17.12.22 17.07.2026 SB2026071701
SB20260721104
#VU137777 - Authentication Bypass by Assumed-Immutable Data
CVE-2026-47303		 CWE-302 Medium
No
No
 17.12.22 15.07.2026 SB2026071577
SB20260721104
#VU137776 - Incorrect Implementation of Authentication Algorithm
CVE-2026-47300		 CWE-303 Medium
No
No
 17.12.22 15.07.2026 SB2026071577
SB20260721104
#VU131366 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32175		 CWE-22 Medium
No
No
 15.9.80, 16.11.56, 17.12.20 13.05.2026 SB2026051387
SB2026051478
SB2026051479
and 7 more
#VU131324 - Heap-based Buffer Overflow
CVE-2026-32177		 CWE-122 Low
No
No
 15.9.80, 16.11.56, 17.12.20 13.05.2026 SB2026051358
SB2026051478
SB2026051479
and 7 more
#VU126305 - Exposure of Private Information ('Privacy Violation')
CVE-2026-32631		 CWE-359 Medium
No
No
 15.9.79, 16.11.55, 17.12.19 16.04.2026 SB2026041621
SB2026042080
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637		 CWE-249 High
No
No
 16.11.55, 17.12.19, 17.14.30 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 25 more


Showing elements 1 - 20 out of 246