Known vulnerabilities in Visual Studio - page 2

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Total vulnerabilities: 246
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 246 known vulnerabilities: 2 critical, 81 high, 82 medium, 81 low Critical High Medium Low

Vulnerabilities (246)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126242 - Stack-based buffer overflow
CVE-2026-32203
CWE-121 Medium
No
No
17.12.19 15.04.2026 SB20260415155
SB2026041655
SB2026041656
and 19 more
#VU126231 - Improper Neutralization of Special Elements
CVE-2026-32178
CWE-138 Medium
No
No
17.12.19 15.04.2026 SB20260415151
SB2026041655
SB2026041656
and 19 more
#VU122634 - Command injection
CVE-2026-21256
CWE-77 High
No
No
- 10.02.2026 SB20260210107
#VU122631 - Command injection
CVE-2026-21257
CWE-77 Medium
No
No
- 10.02.2026 SB20260210107
#VU118330 - Command injection
CVE-2025-62214
CWE-77 Medium
No
No
- 11.11.2025 SB2025111192
#VU117296 - Command injection
CVE-2025-54132
CWE-77 Low
No
No
- 15.10.2025 SB20251015143
#VU117236 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-55315
CWE-444 Medium
Available
No
17.10.20 17.10.20, 17.12.13 17.12.13 15.10.2025 SB2025101593
SB20251015138
SB20251015139
and 9 more
#VU117232 - Improper Access Control
CVE-2025-55240
CWE-284 Low
No
No
15.9.77 15.9.77, 16.11.52 16.11.52, 17.10.20 17.10.20, 17.12.13 17.12.13 15.10.2025 SB2025101589
#VU117231 - Inadequate Encryption Strength
CVE-2025-55248
CWE-326 Medium
No
No
17.10.20 17.10.20, 17.12.13 17.12.13 15.10.2025 SB2025101588
SB20251015138
SB20251015139
and 9 more
#VU114052 - Command injection
CVE-2025-53773
CWE-77 High
No
No
- 13.08.2025 SB20250813101
#VU112690 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-49739
CWE-59 High
No
No
14.0.27564.0 14.0.27564.0, 15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB20250709109
#VU112646 - Product UI does not Warn User of Unsafe Actions
CVE-2025-46835
CWE-356 Medium
No
No
15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB2025070994
SB20250709121
SB2025071019
and 22 more
#VU112644 - Untrusted Search Path
CVE-2025-46334
CWE-426 High
No
No
15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB2025070994
SB20250709120
SB2025071892
and 5 more
#VU112643 - Improper input validation
CVE-2025-27614
CWE-20 High
No
No
15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB2025070994
SB20250709119
SB2025071019
and 18 more
#VU112642 - Protection Mechanism Failure
CVE-2025-27613
CWE-693 High
No
No
15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB2025070994
SB20250709122
SB2025071019
and 22 more
#VU112639 - Memory corruption
CVE-2025-48386
CWE-119 High
No
No
15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 12 more
#VU112638 - Improper input validation
CVE-2025-48385
CWE-20 High
No
No
16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 38 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384
CWE-93 Medium
Available
Exploited
15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 52 more
#VU111028 - Untrusted Search Path
CVE-2025-30399
CWE-426 High
No
No
17.8.22 17.8.22, 17.10.16 17.10.16, 17.12.9 17.12.9 11.06.2025 SB2025061101
SB2025061124
SB2025061126
and 5 more
#VU110754 - Command injection
CVE-2025-47959
CWE-77 Medium
No
No
17.8.22 17.8.22, 17.10.16 17.10.16, 17.12.9 17.12.9 10.06.2025 SB2025061095


Showing elements 21 - 40 out of 246