Microsoft Visual Studio 2015 Update 3 vulnerabilities

Latest Microsoft Visual Studio 2015 Update 3 CVEs

Newest publication first

1. CVE-2025-49739 Visual Studio Elevation of Privilege Vulnerability

   Published 2025-07-08

   High·CVSS 8.8 EPSS 0.95%

   Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.

2. CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability

   Published 2025-01-14

   High·CVSS 7.5 EPSS 1.8%

   .NET and Visual Studio Remote Code Execution Vulnerability

3. CVE-2025-21178 Visual Studio Remote Code Execution Vulnerability

   Published 2025-01-14

   High·CVSS 8.8 EPSS 1.6%

   Visual Studio Remote Code Execution Vulnerability

4. CVE-2025-21176 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

   Published 2025-01-14

   High·CVSS 8.8 EPSS 2.4%

   .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

5. CVE-2024-43603 Visual Studio Collector Service Denial of Service Vulnerability

   Published 2024-10-08

   Medium·CVSS 5.5 EPSS 0.77%

   Visual Studio Collector Service Denial of Service Vulnerability

6. CVE-2024-20656 Visual Studio Elevation of Privilege Vulnerability

   Published 2024-01-09

   High·CVSS 7.8 EPSS 3.9%

   Visual Studio Elevation of Privilege Vulnerability

7. CVE-2023-36796 Visual Studio Remote Code Execution Vulnerability

   Published 2023-09-12

   High·CVSS 7.8 EPSS 1.2%

   Visual Studio Remote Code Execution Vulnerability

8. CVE-2023-24897 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

   Published 2023-06-14

   High·CVSS 7.8 EPSS 1.2%

   .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

9. CVE-2023-33139 Visual Studio Information Disclosure Vulnerability

   Published 2023-06-13

   Medium·CVSS 5.5 EPSS 0.82%

   Visual Studio Information Disclosure Vulnerability

10. CVE-2023-23381 Visual Studio Remote Code Execution Vulnerability

    Published 2023-02-14

    High·CVSS 7.8 EPSS 0.44%

    Visual Studio Remote Code Execution Vulnerability

11. CVE-2023-21815 Visual Studio Remote Code Execution Vulnerability

    Published 2023-02-14

    High·CVSS 7.8 EPSS 0.52%

    Visual Studio Remote Code Execution Vulnerability

12. CVE-2023-21808 .NET and Visual Studio Remote Code Execution Vulnerability

    Published 2023-02-14

    High·CVSS 7.8 EPSS 1.1%

    .NET and Visual Studio Remote Code Execution Vulnerability

13. CVE-2022-35827 Visual Studio Remote Code Execution Vulnerability

    Published 2022-08-09

    High·CVSS 8.8 EPSS 2.2%

    Visual Studio Remote Code Execution Vulnerability

14. CVE-2022-35826 Visual Studio Remote Code Execution Vulnerability

    Published 2022-08-09

    High·CVSS 8.8 EPSS 2.2%

    Visual Studio Remote Code Execution Vulnerability

15. CVE-2022-35825 Visual Studio Remote Code Execution Vulnerability

    Published 2022-08-09

    High·CVSS 8.8 EPSS 2.2%

    Visual Studio Remote Code Execution Vulnerability

16. CVE-2022-35777 Visual Studio Remote Code Execution Vulnerability

    Published 2022-08-09

    High·CVSS 8.8 EPSS 2.1%

    Visual Studio Remote Code Execution Vulnerability

17. CVE-2022-21871 Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

    Published 2022-01-11

    High·CVSS 7.8 EPSS 0.70%

    Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

18. CVE-2021-42277 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

    Published 2021-11-10

    High·CVSS 7.8 EPSS 0.87%

    Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.