Known vulnerabilities in Visual Studio - page 6

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Total vulnerabilities: 246
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 246 known vulnerabilities: 2 critical, 81 high, 82 medium, 81 low Critical High Medium Low

Vulnerabilities (246)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83143 - Improper input validation
CVE-2023-36038
CWE-20 Medium
No
Exploited
- 15.11.2023 SB2023111504
#VU83142 - Security Features
CVE-2023-36558
CWE-254 Low
No
No
- 15.11.2023 SB2023111504
SB2023111551
SB2023112362
and 9 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
17.2.20 17.2.34202.200, 17.4.12 17.4.34202.201, 17.6.8 17.6.34202.202, 17.7.5 17.7.34202.233 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU80730 - Improper input validation
CVE-2023-36799
CWE-20 Medium
No
No
17.2.19 17.2.34031.104, 17.4.11 17.4.34031.109, 17.6.7 17.6.34031.178, 17.7.4 17.7.34031.279 13.09.2023 SB2023091325
SB2023091326
SB2023091412
and 23 more
#VU80677 - Permissions, Privileges, and Access Controls
CVE-2023-36758
CWE-264 Low
No
No
17.7.4 17.7.34031.279 12.09.2023 SB2023091258
#VU80676 - Permissions, Privileges, and Access Controls
CVE-2023-36759
CWE-264 Medium
No
No
16.11.30 16.11.34031.81, 17.2.19 17.2.34031.104, 17.4.11 17.4.34031.109, 17.6.7 17.6.34031.178, 17.7.4 17.7.34031.279 12.09.2023 SB2023091258
#VU80675 - Improper input validation
CVE-2023-36792
CWE-20 High
No
No
15.9.57, 16.11.30 16.11.34031.81, 17.2.19 17.2.34031.104, 17.4.11 17.4.34031.109, 17.7.4 17.7.34031.279 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80674 - Improper input validation
CVE-2023-36793
CWE-20 High
No
No
- 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80671 - Improper input validation
CVE-2023-36794
CWE-20 High
No
No
- 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80669 - Improper input validation
CVE-2023-36796
CWE-20 High
No
No
15.9.57, 16.11.30 16.11.34031.81, 17.2.19 17.2.34031.104, 17.4.11 17.4.34031.109, 17.6.7 17.6.34031.178, 17.7.4 17.7.34031.279 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU79255 - Exposure of sensitive information to an unauthorized actor
CVE-2023-35391
CWE-200 Low
No
No
17.2.18 17.2.33927.290, 17.4.10 17.4.33927.135, 17.6.6 17.6.33927.249 08.08.2023 SB20230808137
SB2023092110
#VU79240 - Improper input validation
CVE-2023-38178
CWE-20 Medium
No
No
17.2.18 17.2.33927.290, 17.4.10 17.4.33927.135 08.08.2023 SB20230808104
SB2023080903
SB2023081036
#VU79182 - Improper input validation
CVE-2023-35390
CWE-20 High
No
No
17.2.18 17.2.33927.290, 17.4.10 17.4.33927.135, 17.6.6 17.6.33927.249 08.08.2023 SB2023080884
SB2023080903
SB2023081036
and 12 more
#VU79180 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36897
CWE-451 High
No
No
17.2.18 17.2.33927.290, 17.4.10 17.4.33927.135, 17.6.6 17.6.33927.249 08.08.2023 SB2023080883
#VU79145 - Improper input validation
CVE-2023-38180
CWE-20 High
No
Exploited
17.2.18 17.2.33927.290, 17.4.10 17.4.33927.135, 17.6.6 17.6.33927.249 08.08.2023 SB2023080865
SB2023080903
SB2023081036
and 12 more
#VU78214 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-33127
CWE-362 Low
No
No
- 12.07.2023 SB2023071279
#VU78213 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-33170
CWE-362 High
No
No
- 12.07.2023 SB2023071278
SB2023071280
SB2023071344
and 14 more
#VU77276 - Out-of-bounds read
CVE-2023-33139
CWE-125 Low
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2013 12.0.40702.0, 2015 14.0.27554.0, 2017 version 15.9.55 14.06.2023 SB2023061407
#VU75486 - Improper input validation
CVE-2023-29007
CWE-20 Low
Available
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2017 version 15.9.55 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652
CWE-59 Low
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2017 version 15.9.55 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more


Showing elements 101 - 120 out of 246