CVE Feed

    Dashboard / CVE / CVE-2018-1037

    CVE-2018-1037

    An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.

    Published:Apr 12, 2018
    Last Modified:Nov 21, 2024
    EPS:Apr 12, 2018
    EPSS Score:0.09719
    CVSS Score:4.3

    Affected Products

    Vendor
    Microsoft
    Product
    Visual Studio
    Vendor
    Microsoft
    Product
    Visual Studio 2017

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-908 Use of Uninitialized Resource

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-62449 (CVSS 6.8) — Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot C…
    CVE-2025-62222 (CVSS 8.8) — Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPi…
    CVE-2025-62214 (CVSS 6.7) — Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an…
    CVE-2025-55248 (CVSS 4.8) — Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclos…
    CVE-2025-55240 (CVSS 7.3) — Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.…
    CVE-2025-55315 (CVSS 9.9) — Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an aut…
    CVE-2025-53773 (CVSS 7.8) — Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visu…
    CVE-2025-49739 (CVSS 8.8) — Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacke…
    CVE-2025-47959 (CVSS 7.1) — Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an…
    CVE-2024-43603 (CVSS 5.5) — Visual Studio Collector Service Denial of Service Vulnerability…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High