CVE-2019-1079: Microsoft Visual Studio

Medium severity, CVSS 6.5. EPSS: 6.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'.

Affected products

• Microsoft Visual Studio: version 2010 only; version 2012 only; version 2013 only; version 2015 only

Published 2019-07-15. Last modified 2026-06-17.