CVE-2019-0809: Microsoft Visual Studio 2017

High severity, CVSS 7.8. EPSS: 10.6% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka 'Visual Studio Remote Code Execution Vulnerability'.

Affected products

• Microsoft Visual Studio 2017: version 15.9 only

Published 2019-04-09. Last modified 2026-06-17.