Microsoft Visual Studio 2015 vulnerabilities

4 CVEs affecting Microsoft Visual Studio 2015, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-0900, published 2020-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0952, published 2018-08-15. High severity, CVSS 7.8. EPSS: 6.2% chance of exploitation in the next 30 days. An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege…
CVE-2020-0810, published 2020-03-12. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the…
CVE-2020-0900, published 2020-04-15. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of…
CVE-2020-0793, published 2020-03-12. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege…