Known vulnerabilities in Visual Studio - page 8

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 246
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 246 known vulnerabilities: 2 critical, 81 high, 82 medium, 81 low Critical High Medium Low

Vulnerabilities (246)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-23946		 CWE-59 Medium
No
No
 - 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 28 more
#VU72244 - Untrusted Search Path
CVE-2023-22743		 CWE-426 Medium
No
No
 - 15.02.2023 SB2023021528
SB2023031475
#VU72243 - Untrusted Search Path
CVE-2023-23618		 CWE-426 Low
No
No
 - 15.02.2023 SB2023021528
SB2023031474
#VU72219 - Permissions, Privileges, and Access Controls
CVE-2023-21566		 CWE-264 Low
No
No
 15.9.52, 16.11.24 16.11.33328.57, 17.0.19 17.0.33402.176, 17.2.13 17.2.33402.178, 17.4.5 17.4.33403.182 15.02.2023 SB2023021505
#VU72218 - Improper input validation
CVE-2023-21567		 CWE-20 Low
No
No
 15.9.52, 16.11.24 16.11.33328.57, 17.0.19 17.0.33402.176, 17.2.13 17.2.33402.178, 17.4.5 17.4.33403.182 15.02.2023 SB2023021505
#VU72217 - Memory corruption
CVE-2023-21815		 CWE-119 High
No
No
 15.9.52, 16.11.24 16.11.33328.57, 17.0.19 17.0.33402.176, 17.2.13 17.2.33402.178, 17.4.5 17.4.33403.182 15.02.2023 SB2023021505
#VU72216 - Memory corruption
CVE-2023-23381		 CWE-119 High
No
No
 15.9.52, 16.11.24 16.11.33328.57, 17.0.19 17.0.33402.176, 17.2.13 17.2.33402.178, 17.4.5 17.4.33403.182 15.02.2023 SB2023021505
#VU72215 - Improper input validation
CVE-2023-21808		 CWE-20 High
No
No
 15.9.52, 16.11.24 16.11.33328.57, 17.0.19 17.0.33402.176, 17.2.13 17.2.33402.178, 17.4.5 17.4.33403.182 15.02.2023 SB2023021504
SB2023111618
#VU71240 - Untrusted Search Path
CVE-2022-41953		 CWE-426 High
No
No
 15.9.52, 16.11.24 16.11.33328.57, 17.0.19 17.0.33402.176, 17.2.13 17.2.33402.178, 17.4.5 17.4.33403.182 17.01.2023 SB2023011739
SB2023021521
SB2023020344
#VU71239 - Integer overflow
CVE-2022-23521		 CWE-190 High
No
No
 15.9.52, 16.11.24 16.11.33328.57, 17.0.19 17.0.33402.176, 17.2.13 17.2.33402.178, 17.4.5 17.4.33403.182 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 52 more
#VU70177 - Improper input validation
CVE-2022-41089		 CWE-20 High
No
No
 - 13.12.2022 SB2022121355
#VU69134 - Improper input validation
CVE-2022-41119		 CWE-20 High
No
No
 - 08.11.2022 SB2022110891
#VU68517 - Improper input validation
CVE-2022-39253		 CWE-20 Low
Available
No
 - 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 41 more
#VU68170 - Permissions, Privileges, and Access Controls
CVE-2022-41032		 CWE-264 Low
No
No
 - 11.10.2022 SB2022101160
SB2022101238
SB2022101604
and 17 more
#VU67286 - Improper input validation
CVE-2022-38013		 CWE-20 Medium
No
No
 - 14.09.2022 SB2022091402
SB2022091415
SB2022091462
and 12 more
#VU66319 - Improper input validation
CVE-2022-35827		 CWE-20 High
No
No
 - 09.08.2022 SB2022080949
#VU66318 - Improper input validation
CVE-2022-35826		 CWE-20 High
No
No
 - 09.08.2022 SB2022080949
#VU66317 - Improper input validation
CVE-2022-35825		 CWE-20 High
No
No
 - 09.08.2022 SB2022080949
#VU66316 - Improper input validation
CVE-2022-35777		 CWE-20 High
No
No
 - 09.08.2022 SB2022080949
#VU64285 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30184		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061428
SB2022061640
SB2022061641
and 11 more


Showing elements 141 - 160 out of 246