Microsoft
Microsoft Visual Studio 2019: vulnerabilidades y CVE
Microsoft Visual Studio 2019 tiene 119 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 3 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE119
Últimos 12 meses2
Críticas3
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-1147 | Alta (7.8) | 94% | ⚠ Explotación activa | 14 jul 2020 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-47304 | Crítica (9.8) | 0.29% | — | 14 jul 2026 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2025-55240 | Alta (7.3) | 0.37% | — | 14 oct 2025 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49739 | Alta (8.8) | 0.87% | — | 8 jul 2025 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2025-32703 | Media (5.5) | 0.46% | — | 13 may 2025 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. |
| CVE-2025-32702 | Alta (7.8) | 0.62% | — | 13 may 2025 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally. |
| CVE-2025-25003 | Alta (7.3) | 0.45% | — | 11 mar 2025 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24998 | Alta (7.3) | 0.45% | — | 11 mar 2025 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-21206 | Alta (7.3) | 0.69% | — | 11 feb 2025 | Visual Studio Installer Elevation of Privilege Vulnerability |
| CVE-2025-21178 | Alta (8.8) | 1.6% | — | 14 ene 2025 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2025-21172 | Alta (7.5) | 1.8% | — | 14 ene 2025 | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-43603 | Media (5.5) | 0.77% | — | 8 oct 2024 | Visual Studio Collector Service Denial of Service Vulnerability |
| CVE-2024-43590 | Alta (7.8) | 0.43% | — | 8 oct 2024 | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability |
| CVE-2024-30052 | Media (4.7) | 1.4% | — | 11 jun 2024 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-29060 | Media (6.7) | 0.89% | — | 11 jun 2024 | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2024-28938 | Alta (8.8) | 2.3% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28937 | Alta (8.8) | 2.3% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28936 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28935 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28934 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28933 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28932 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28931 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28930 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28929 | Alta (8.8) | 2.4% | — | 9 abr 2024 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-20656 | Alta (7.8) | 3.9% | — | 9 ene 2024 | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-36042 | Media (5.5) | 0.79% | — | 14 nov 2023 | Visual Studio Denial of Service Vulnerability |
| CVE-2023-36796 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36794 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36793 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36792 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.