What’s Vulnerable › Products

Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) vulnerabilities

94 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) version is affected

Exploited Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) vulnerabilities

• CVE-2020-1147 — Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Latest Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) vulnerabilities

• CVE-2026-47304 — .NET Security Feature Bypass Vulnerability (CVSS 9.8)
• CVE-2025-55240 — Visual Studio Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2025-49739 — Visual Studio Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-32703 — Visual Studio Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2025-24998 — Visual Studio Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2025-21206 — Visual Studio Installer Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2025-21178 — Visual Studio Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2025-21176 — .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2025-21172 — .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2024-43603 — Visual Studio Collector Service Denial of Service Vulnerability (CVSS 5.5)
• CVE-2024-43590 — Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2024-29060 — Visual Studio Elevation of Privilege Vulnerability (CVSS 6.7)
• CVE-2024-20656 — Visual Studio Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2023-36796 — Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-36794 — Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-36793 — Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-36792 — Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-36897 — Visual Studio Tools for Office Runtime Spoofing Vulnerability (CVSS 6.5)
• CVE-2023-24897 — .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-33139 — Visual Studio Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2023-28299 — Visual Studio Spoofing Vulnerability (CVSS 5.5)
• CVE-2023-28296 — Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-23381 — Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-21815 — Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-21808 — .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 7.8)