Microsoft released a new servicing update (version 15.9.5) for Visual Studio 2017 to patch the existing issues that was reported by the customers. Download the latest version of Visual Studio 2017 and stay updated with all fixes.
A remote code execution vulnerability exists in Visual Studio for the C++ compiler. Make sure to read this security warning before upgrading.
Download latest version of Visual Studio 2017
Visual Studio 2017 is the latest version of Visual Studio IDE and comes in three different editions. The different editions of Visual Studio 2017 are: Visual Studio Community 2017, Visual Studio Professional 2017 and Visual Studio Enterprise 2017.
If you are an indie developer and/or building open-source projects, you can download Microsoft Visual Studio Community 2017 for free. It gives you the total power of the Professional Edition.
👉 Click here to download latest version of Visual Studio 2017
Point to note that, the next version of Visual Studio, i.e. Visual Studio 2019 Preview is now also available. You can download the latest version of Visual Studio 2019 here.
What's new and improved in Visual Studio 2017 version 15.9.5?
CVE-2019-0546: Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system.
An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. The security update addresses the vulnerability by correcting how the Visual Studio C++ compiler handles certain C++ constructs.