Known vulnerabilities in Visual Studio - page 14

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 311
Public exploits: 13
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 311 known vulnerabilities: 2 critical, 105 high, 117 medium, 87 low Critical High Medium Low

Vulnerabilities (311)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154619 - Weak password recovery mechanism
CVE-2026-70175		 CWE-640 High
No
No
 17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154618 - Improperly Implemented Security Check for Standard
CVE-2026-70174		 CWE-358 High
No
No
 17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU154610 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-70165		 CWE-59 Medium
No
No
 17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 3 more
#VU154607 - Asymmetric Resource Consumption (Amplification)
CVE-2026-70162		 CWE-405 Medium
No
No
 17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU154606 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-70161		 CWE-22 Medium
No
No
 17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 3 more
#VU154604 - Allocation of Resources Without Limits or Throttling
CVE-2026-70159		 CWE-770 Medium
No
No
 17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154515 - Deserialization of Untrusted Data
CVE-2026-70035		 CWE-502 High
No
No
 17.14.42 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU154498 - Out-of-bounds write
CVE-2026-70007		 CWE-787 High
No
No
 17.14.42 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU154409 - Inefficient Algorithmic Complexity
CVE-2026-69651		 CWE-407 Medium
No
No
 17.14.42 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154386 - Insertion of Sensitive Information Into Sent Data
CVE-2026-66822		 CWE-201 Medium
No
No
 17.14.42 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154381 - Uncontrolled Recursion
CVE-2026-58280		 CWE-674 Medium
No
No
 17.14.42 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154330 - Heap-based Buffer Overflow
CVE-2026-105016		 CWE-122 High
No
No
 17.14.42 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU154314 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-103572		 CWE-94 High
No
No
 17.14.42 13.10.2026 SB2026101402
#VU154303 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-102870		 CWE-94 High
No
No
 17.14.42 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 2 more
#VU154302 - Type confusion
CVE-2026-102869		 CWE-843 High
No
No
 17.14.42 13.10.2026 SB2026101402
#VU13777 - Improper input validation
CVE-2018-8172		 CWE-20 High
No
No
 - 10.07.2018 SB2018071014
#VU13779 - Permissions, Privileges, and Access Controls
CVE-2018-8232		 CWE-264 Low
No
No
 - 10.07.2018 SB2018071014
#VU11733 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1037		 CWE-200 Low
No
No
 - 10.04.2018 SB2018041031
#VU1420 - Memory corruption
CVE-2009-1136		 CWE-119 Critical
Available
Exploited
 - 20.12.2016 SB2009071301
#VU1207 - Memory corruption
CVE-2006-4704		 CWE-119 Critical
Available
No
 - 05.12.2016 SB2006103104


Showing elements 261 - 280 out of 311