Skip to content

Product

Microsoft visual studio 2017 vulnerabilities

105 published CVES affecting Microsoft visual studio 2017, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
105
Critical
3
High
80
Medium
20
Low
2
Unscored
0
CISA KEV
3

Latest Microsoft visual studio 2017 CVEs

Newest publication first · page 1 of 5

  1. CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

    Published
    CriticalCVSS 9.2 EPSS 82.6% CISA KEV added 2026-10-27 Exploited in the wild PoC

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service,...

  5. CVE-2025-6965 Integer Truncation on SQLite

    Published
    HighCVSS 7.2 EPSS 73.5% Public exploit

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

  7. CVE-2025-46334 Git GUI malicious command injection on Windows

    Published
    HighCVSS 8.6 EPSS 0.37%

    Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable...

  8. CVE-2025-27614 Gitk allows arbitrary command execution

    Published
    HighCVSS 8.6 EPSS 0.43%

    Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ...) supplied by the at...

  9. CVE-2025-27613 Gitk can create and truncate files in the user's home directory

    Published
    LowCVSS 3.6 EPSS 0.60%

    Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must ha...

  10. CVE-2025-48384 Git allows arbitrary code execution through broken config quoting

    Published
    HighCVSS 8.1 EPSS 4.5% CISA KEV added 2025-08-25 Exploited in the wild

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config...

  11. CVE-2025-48386 Git allows a buffer overflow in 'wincred' credential helper

    Published
    MediumCVSS 6.3 EPSS 0.43%

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against int...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.