CVE-2019-0546: Microsoft Visual Studio 2017

High severity, CVSS 7.8. EPSS: 16.2% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio.

Affected products

• Microsoft Visual Studio 2017: version 15.9 only

Published 2019-01-08. Last modified 2026-06-17.