GCVE - cpe:2.3:a:microsoft:visual_studio:2010:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio:2010:sp1:*:*:*:*:*:*

part: a version: 2010 update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visual Studio (`aeafcbc5-ae90-5076-b87e-4062acc6a96b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-1079`	vulnerable	2026-06-08 05:13:24.727546	Details available An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'. Published: 2019-07-15T18:56:20.000Z Updated: 2024-08-04T18:06:31.670Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0537`	vulnerable	2026-06-08 05:12:19.896126	Details available An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio. Published: 2019-01-08T21:00:00.000Z Updated: 2024-08-04T17:51:26.628Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0537 http://www.securityfocus.com/bid/106390	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8172`	vulnerable	2026-06-08 05:12:05.373858	Details available A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4. Published: 2018-07-11T00:00:00.000Z Updated: 2024-08-05T06:46:13.505Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1041253 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8172 http://www.securityfocus.com/bid/104616	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1037`	vulnerable	2026-06-08 05:11:16.673875	Details available An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio. Published: 2018-04-12T01:00:00.000Z Updated: 2024-08-05T03:44:11.975Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1040664 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037 http://www.securityfocus.com/bid/103715	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3802`	vulnerable	2026-06-08 05:05:42.779197	Details available msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file. Published: 2014-05-20T23:00:00.000Z Updated: 2024-08-06T10:57:17.127Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/67398 http://zerodayinitiative.com/advisories/ZDI-14-129/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0008`	vulnerable	2026-06-08 04:59:35.549255	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.