CVE-2018-1037: Microsoft Visual Studio

Medium severity, CVSS 4.3. EPSS: 5.8% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.

Affected products

• Microsoft Visual Studio: version 2010 only; version 2012 only; version 2013 only; version 2015 only; version 2017 only
• Microsoft Visual Studio 2017: version 15.6.6 only; version 15.7 only

Published 2018-04-12. Last modified 2026-06-17.