Known vulnerabilities in Visual Studio - page 7

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Total vulnerabilities: 246
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 246 known vulnerabilities: 2 critical, 81 high, 82 medium, 81 low Critical High Medium Low

Vulnerabilities (246)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77242 - Improper input validation
CVE-2023-24897
CWE-20 High
No
No
- 13.06.2023 SB2023061357
SB2023111618
#VU77239 - Improper input validation
CVE-2023-24895
CWE-20 High
No
No
- 13.06.2023 SB2023061357
SB2023111618
SB20250219564
#VU77237 - Permissions, Privileges, and Access Controls
CVE-2023-24936
CWE-264 High
No
No
- 13.06.2023 SB2023061357
SB2023061450
SB2023061466
and 9 more
#VU77235 - Improper input validation
CVE-2023-29331
CWE-20 Medium
No
No
- 13.06.2023 SB2023061357
SB2023061450
SB2023061466
and 11 more
#VU77231 - Permissions, Privileges, and Access Controls
CVE-2023-32032
CWE-264 Low
No
No
- 13.06.2023 SB2023061352
SB2023061450
SB2023061478
and 4 more
#VU77230 - Improper input validation
CVE-2023-33126
CWE-20 Medium
No
No
- 13.06.2023 SB2023061352
SB2023111618
#VU77229 - Improper input validation
CVE-2023-33128
CWE-20 Medium
No
No
- 13.06.2023 SB2023061352
SB2023061450
SB2023061466
and 10 more
#VU77226 - Permissions, Privileges, and Access Controls
CVE-2023-33135
CWE-264 Medium
No
No
- 13.06.2023 SB2023061352
SB2023111618
SB20250219564
#VU75487 - Untrusted Search Path
CVE-2023-29011
CWE-426 Low
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2017 version 15.9.55 25.04.2023 SB2023042553
SB2023061406
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2017 version 15.9.55 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75483 - Untrusted Search Path
CVE-2023-29012
CWE-426 Medium
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2017 version 15.9.55 25.04.2023 SB2023042553
SB2023061406
#VU74917 - Uncontrolled Search Path Element
CVE-2023-28260
CWE-427 Medium
No
No
- 11.04.2023 SB2023041173
SB2023041206
SB2023111618
#VU74871 - Permissions, Privileges, and Access Controls
CVE-2023-28262
CWE-264 Low
No
No
- 11.04.2023 SB2023041149
#VU74870 - Out-of-bounds read
CVE-2023-28263
CWE-125 Low
No
No
- 11.04.2023 SB2023041149
#VU74868 - Improper input validation
CVE-2023-28296
CWE-20 High
No
No
- 11.04.2023 SB2023041149
#VU74867 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-28299
CWE-451 Medium
No
No
- 11.04.2023 SB2023041149
#VU74293 - Heap-based Buffer Overflow
CVE-2023-27911
CWE-122 High
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2013 12.0.40702.0, 2015 14.0.27554.0, 2017 version 15.9.55 03.04.2023 SB2023040321
SB2023061404
#VU74292 - Stack-based buffer overflow
CVE-2023-27910
CWE-121 High
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2013 12.0.40702.0, 2015 14.0.27554.0, 2017 version 15.9.55 03.04.2023 SB2023040321
SB2023061404
#VU74291 - Out-of-bounds write
CVE-2023-27909
CWE-787 High
No
No
16.11.27 16.11.33801.447, 17.0.22 17.0.33801.228, 17.2.16 17.2.33801.349, 17.4.8 17.4.33801.306, 17.6.3 17.6.33801.468, 2013 12.0.40702.0, 2015 14.0.27554.0, 2017 version 15.9.55 03.04.2023 SB2023040321
SB2023061404
#VU72246 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-22490
CWE-59 Low
No
No
- 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 31 more


Showing elements 121 - 140 out of 246