[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flw8IBFvv4BWqUve6nykEkz8US0wQKRgt_9kGSXfurAI":3,"g5a-ex:microsoft\u002Fvisual_studio@*":140,"g5a-family:microsoft\u002Fvisual_studio":142},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":60,"kevVulnerabilities":117,"seoMetadata":118,"meta":137},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"microsoft","visual_studio",12,56,0,"2024-10-08",[14,18,21,24,27,30,33,35,38,40,42,44],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2002",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2003",2,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"2005",8,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"2008",14,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"2010",9,{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"2012",10,{"version":34,"cve_count":29,"kev_count":11,"has_kev":17},"2013",{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"2015",30,{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},"2017",{"version":41,"cve_count":29,"kev_count":11,"has_kev":17},"6.0",{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},"6.0.0.9782",{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},"97","Visual Studio by Microsoft is a technology product with 12 tracked versions and 56 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57,58,59],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":29,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},{"version":41,"cve_count":29,"kev_count":11,"has_kev":17},{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},[61,69,77,81,87,93,99,104,109,113],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":68},"CVE-2008-3704","Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not \"validating property values with boundary checks,\" as exploited in the wild in August 2008, aka \"Masked Edit Control Memory Corruption Vulnerability.\"","2008-08-18",9.3,"v2","Critical",0.55917,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":17,"epssScore":76},"CVE-2009-2493","The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka \"ATL COM Initialization Vulnerability.\"","2009-07-29",8.8,"v3.1","High",0.3776,{"cveId":78,"description":79,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":17,"epssScore":80},"CVE-2009-0901","The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka \"ATL Uninitialized Object Vulnerability.\"",0.36608,{"cveId":82,"description":83,"publishedDate":72,"cvssScore":84,"cvssVersion":74,"severity":85,"isKev":17,"epssScore":86},"CVE-2009-2495","The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka \"ATL Null String Vulnerability.\"",6.5,"Medium",0.343,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":74,"severity":75,"isKev":17,"epssScore":92},"CVE-2018-8172","A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka \"Visual Studio Remote Code Execution Vulnerability.\" This affects Microsoft Visual Studio, Expression Blend 4.","2018-07-11",7.8,0.33626,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":66,"severity":85,"isKev":17,"epssScore":98},"CVE-2007-4891","A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.","2007-09-14",6.8,0.31003,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":103},"CVE-2009-2501","Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka \"GDI+ PNG Heap Overflow Vulnerability.\"","2009-10-14",0.26715,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":97,"cvssVersion":66,"severity":85,"isKev":17,"epssScore":108},"CVE-2007-0468","Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the \"1 TYPELIB MOVEABLE PURE\" option in an RC file.","2007-01-24",0.24812,{"cveId":110,"description":111,"publishedDate":102,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":112},"CVE-2009-2500","Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka \"GDI+ WMF Integer Overflow Vulnerability.\"",0.23647,{"cveId":114,"description":115,"publishedDate":102,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":116},"CVE-2009-3126","Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka \"GDI+ PNG Integer Overflow Vulnerability.\"",0.23461,[],{"title":119,"metaDescription":120,"keywords":121,"structuredData":122},"Visual Studio by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Visual Studio by Microsoft covering 12 versions with 56 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Visual Studio vulnerabilities, Visual Studio security, Visual Studio CVE, Microsoft Visual Studio, Visual Studio threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":123,"@type":124,"name":125,"description":120,"url":126,"manufacturer":127,"applicationCategory":131,"softwareVersion":132,"mainEntity":133},"https:\u002F\u002Fschema.org","SoftwareApplication","Visual Studio","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fvisual_studio",{"@type":128,"name":129,"url":130},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","12 versions tracked",{"@type":134,"name":135,"description":136,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Visual Studio Security Vulnerabilities","Security vulnerabilities affecting Visual Studio by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":138,"apiVersion":139},"2026-10-18T20:36:56.463Z","3.0",{"rows":141,"total":11,"capped":17,"failed":11},[],[143,146,149,152,155,158,161,163,165,167,169,171],{"product":144,"cves":145},"visual_studio_2019",115,{"product":147,"cves":148},"visual_studio_2022",105,{"product":150,"cves":151},"visual_studio_2017",90,{"product":153,"cves":154},"visual_studio_code",50,{"product":156,"cves":157},"visual_studio_.net",29,{"product":159,"cves":160},"visual_studio_2015",4,{"product":162,"cves":20},"visual_studio_team_foundation_server",{"product":164,"cves":20},"visual_studio_code_eslint_extension",{"product":166,"cves":20},"visual_studio_live_share",{"product":168,"cves":16},"visual_studio_code_github_pull_requests_and_issues",{"product":170,"cves":16},"visual_studio_2010_tools_for_office_runtime",{"product":172,"cves":16},"visual_studio_code_kubernetes_tools"]