Microsoft
Microsoft Visual Studio 2017: vulnerabilidades y CVE
Microsoft Visual Studio 2017 tiene 93 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 1 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE93
Últimos 12 meses2
Críticas1
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-1147 | Alta (7.8) | 94% | ⚠ Explotación activa | 14 jul 2020 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-47304 | Crítica (9.8) | 0.29% | — | 14 jul 2026 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2025-55240 | Alta (7.3) | 0.37% | — | 14 oct 2025 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49739 | Alta (8.8) | 0.87% | — | 8 jul 2025 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2025-32703 | Media (5.5) | 0.46% | — | 13 may 2025 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. |
| CVE-2025-24998 | Alta (7.3) | 0.45% | — | 11 mar 2025 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-21206 | Alta (7.3) | 0.69% | — | 11 feb 2025 | Visual Studio Installer Elevation of Privilege Vulnerability |
| CVE-2025-21178 | Alta (8.8) | 1.6% | — | 14 ene 2025 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2025-21176 | Alta (8.8) | 2.3% | — | 14 ene 2025 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2025-21172 | Alta (7.5) | 1.8% | — | 14 ene 2025 | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-43603 | Media (5.5) | 0.77% | — | 8 oct 2024 | Visual Studio Collector Service Denial of Service Vulnerability |
| CVE-2024-43590 | Alta (7.8) | 0.43% | — | 8 oct 2024 | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability |
| CVE-2024-29060 | Media (6.7) | 0.89% | — | 11 jun 2024 | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2024-20656 | Alta (7.8) | 3.9% | — | 9 ene 2024 | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-36796 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36794 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36793 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36792 | Alta (7.8) | 1.2% | — | 12 sept 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36897 | Media (6.5) | 1.7% | — | 8 ago 2023 | Visual Studio Tools for Office Runtime Spoofing Vulnerability |
| CVE-2023-24897 | Alta (7.8) | 1.2% | — | 14 jun 2023 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-33139 | Media (5.5) | 0.82% | — | 14 jun 2023 | Visual Studio Information Disclosure Vulnerability |
| CVE-2023-28299 | Media (5.5) | 0.54% | — | 11 abr 2023 | Visual Studio Spoofing Vulnerability |
| CVE-2023-28296 | Alta (7.8) | 0.68% | — | 11 abr 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-23381 | Alta (7.8) | 0.44% | — | 14 feb 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-21815 | Alta (7.8) | 0.52% | — | 14 feb 2023 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-21808 | Alta (7.8) | 1.1% | — | 14 feb 2023 | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-21567 | Media (5.6) | 0.80% | — | 14 feb 2023 | Visual Studio Denial of Service Vulnerability |
| CVE-2023-21566 | Alta (7.8) | 0.37% | — | 14 feb 2023 | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2022-41119 | Alta (7.8) | 0.82% | — | 9 nov 2022 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-35827 | Alta (8.8) | 2.1% | — | 9 ago 2022 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-35826 | Alta (8.8) | 2.1% | — | 9 ago 2022 | Visual Studio Remote Code Execution Vulnerability |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.