QID 91757

Date Published: 2021-04-14

QID 91757: Microsoft Visual Studio Security Update for April 2021

Microsoft has released security update for Visual Studio which resolves multiple security vulnerabilities.

Affected Software:
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 - 16.6)
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)

QID Detection Logic:Authenticated
This QID detects vulnerable versions of Microsoft Visual Studio by checking file version of devenv.exe.

Successful exploitation can affect confidentiality, integrity and availability.

  • CVSS V3 rated as High - 7.8 severity.
  • CVSS V2 rated as Medium - 4.6 severity.
  • Solution
    Customers are advised to refer to CVE-2021-27064 for more information pertaining to this vulnerability.

    CVEs related to QID 91757

    Software Advisories
    Advisory ID Software Component Link
    CVE-2021-27064 WIndows URL Logo msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-27064