| CVE-2025-62214 | 中6.7 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally. | 11/11/2025 |
| CVE-2025-55315 | 緊急9.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 14/10/2025 |
| CVE-2025-55248 | 中5.7 | Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. | 14/10/2025 |
| CVE-2025-55240 | 高7.3 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | 14/10/2025 |
| CVE-2025-53773 | 高7.8 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally. | 12/08/2025 |
| CVE-2025-49739 | 高8.8 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 08/07/2025 |
| CVE-2025-47959 | 高7.1 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network. | 13/06/2025 |
| CVE-2025-30399 | 高7.5 | Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network. | 13/06/2025 |
| CVE-2025-26646 | 高8.0 | External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network. | 13/05/2025 |
| CVE-2025-32703 | 中5.5 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. | 13/05/2025 |
| CVE-2025-32702 | 高7.8 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-29804 | 高7.3 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-29802 | 高7.3 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-26682 | 高7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 08/04/2025 |
| CVE-2025-25003 | 高7.3 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. | 11/03/2025 |
| CVE-2025-24998 | 高7.3 | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. | 11/03/2025 |
| CVE-2025-24070 | 高7.0 | Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 11/03/2025 |
| CVE-2025-21206 | 高7.3 | Visual Studio Installer Elevation of Privilege Vulnerability | 11/02/2025 |
| CVE-2025-21405 | 高7.3 | Visual Studio Elevation of Privilege Vulnerability | 14/01/2025 |
| CVE-2025-21178 | 高8.8 | Visual Studio Remote Code Execution Vulnerability | 14/01/2025 |