Visual Studio
Vendor:
First CVE: Feb 18, 2000 · Active for 26 years
57
Total CVEs
More Total CVEs than 98% of tracked products
3.2
Avg CVEs / Year
Higher CVE frequency than 81% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 59% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Visual Studio over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 18, 2000
26 years ago
Most Recent CVE
Jul 8, 2025
381 days ago
CVE Severity & Scoring
Visual Studio57 CVEs
28%
72%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local27 (47.4%)
Network11 (19.3%)
Unknown19 (33.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low37 (64.9%)
High1 (1.8%)
Unknown19 (33.3%)
User Interaction
None21 (36.8%)
Unknown19 (33.3%)
Required17 (29.8%)
Privileges Required
Low20 (35.1%)
High0 (0.0%)
None18 (31.6%)
Unknown19 (33.3%)
Top CVEs
Signals from CVEs in this product scope (57 CVEs).
57 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-3704HIGH Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6 | Aug 18, 2008 | 9.3 | 72 | NO | YES |
CVE-2009-2493HIGH The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows | Jul 29, 2009 | 8.8 | 45 | NO | NO |
CVE-2009-0901HIGH The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP | Jul 29, 2009 | 8.8 | 44 | NO | NO |
CVE-2007-4891MEDIUM A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5 | Sep 14, 2007 | 6.8 | 42 | NO | YES |
CVE-2018-8172HIGH A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remot | Jul 11, 2018 | 7.8 | 41 | NO | NO |
CVE-2006-4494HIGH Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 | Aug 31, 2006 | 7.5 | 39 | NO | YES |
CVE-2009-2495MEDIUM The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not pro | Jul 29, 2009 | 6.5 | 36 | NO | NO |
CVE-2009-3126HIGH Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 | Oct 14, 2009 | 9.3 | 35 | NO | NO |
CVE-2009-2501HIGH Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Pr | Oct 14, 2009 | 9.3 | 35 | NO | NO |
CVE-2011-1976MEDIUM Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web | Aug 10, 2011 | 4.3 | 34 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (57 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
1.8% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
7 CVEs
12.3% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (57 CVEs).
Media Mentions
Signals from CVEs in this product scope (57 CVEs).
Top CNAs Publishing CVEs For Visual Studio
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 6.0.0.9782 | 1 | 6.8 | 31.0% | 0 | 1 |
| 6.0 | 9 | 6.3 | 22.5% | 0 | 6 |
| 2017 | 1 | 4.3 | 6.0% | 0 | 0 |
| 2015 | 31 | 7.6 | 2.5% | 0 | 0 |
| 2013 | 9 | 7.7 | 6.6% | 0 | 0 |
| 2012 | 10 | 7.5 | 6.7% | 0 | 0 |
| 2010 | 8 | 6.4 | 10.0% | 0 | 0 |
| 2008 | 13 | 8.5 | 24.5% | 0 | 0 |
| 2005 | 7 | 7.0 | 26.2% | 0 | 1 |
| 2003 | 2 | 7.8 | 24.4% | 0 | 0 |
| 2002 | 1 | 6.8 | 10.9% | 0 | 0 |