Where
-Infinity
0

Latest version: 18.9.1

First published (updated )
EOL
Aug 11, 2026

End of life: 8/11/2026, Latest version: 18.8.3

First published (updated )
EOL
Jul 14, 2026

End of life: 7/14/2026, Latest version: 18.7.4

First published (updated )
EOL
Jun 9, 2026

End of life: 6/9/2026, Latest version: 18.6.3

First published (updated )
EOL
May 12, 2026

End of life: 5/12/2026, Latest version: 18.5.3

First published (updated )
Severity
7.5
Input Validation
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

.NET - DenialOfService - Denial of Service via Infinite Recursion in XmlDecryptionTransform

1 / 4
Source: Red Hat
First published (updated )
EOL
Apr 14, 2026

End of life: 4/14/2026, Latest version: 18.4.4

First published (updated )
EOL
Mar 10, 2026

End of life: 3/10/2026, Latest version: 18.3.3

First published (updated )
EOL
Feb 10, 2026

End of life: 2/10/2026, Latest version: 18.2.2

First published (updated )

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.

First published (updated )
Advisory
ZDI-25-1057

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.

First published (updated )
EOL
Jan 13, 2026

End of life: 1/13/2026, Latest version: 18.1.1

First published (updated )
EOL
Dec 9, 2025

End of life: 12/9/2025, Latest version: 18.0.2

First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
EOL
Jan 13, 2032

End of life: 1/13/2032, Latest version: 17.14.38

First published (updated )
Severity
7

.NET and Visual Studio Remote Code Execution Vulnerability

First published (updated )
EOL
Jul 14, 2026

End of life: 7/14/2026, Latest version: 17.12.22

First published (updated )
EOL
Jul 14, 2026

End of life: 7/14/2026, Latest version: 17.12.22

First published (updated )
EOL
Apr 10, 2029

End of life: 4/10/2029, Latest version: 16.11.59

First published (updated )
EOL
Apr 10, 2029

End of life: 4/10/2029, Latest version: 16.11.59

First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Visual Studio Collector Service Denial of Service Vulnerability

First published (updated )
EOL
Apr 13, 2027

End of life: 4/13/2027, Latest version: 15.9.82

First published (updated )
EOL
Apr 13, 2027

End of life: 4/13/2027, Latest version: 15.9.82

First published (updated )
Severity
7.8
EPSS
0.15%
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Visual Studio Elevation of Privilege Vulnerability

1 / 3
Source: Microsoft
First published (updated )
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

Visual Studio Information Disclosure Vulnerability

1 / 3
First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Visual Studio Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Visual Studio Remote Code Execution Vulnerability

First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Visual Studio Remote Code Execution Vulnerability

First published (updated )
Severity
8.8
Code Injection
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Visual Studio Remote Code Execution Vulnerability

1 / 3
First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

1 / 4
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203