Download Microsoft Visual Studio 2017 15.7.5

Microsoft has released version 15.7.5 of Visual Studio 2017. This popular programming development environment has useful options to make programming easier in Visual C++, Visual Basic, C#, F#, Python, and R, among others. You can read the entire laundry list of changes from the 2017 edition in the accompanying release notes. The changes in this release are as follows:

Top Issues Fixed in 15.7.5

These are the customer-reported issues addressed in 15.7.5:

• VS2017 15.7.0 Community debugger not showing variable values ​​on hover.
• Exception block is optimized away causing a crash.
• cannot push to remote repository since update from 15.7.2 to 15.7.3.
• Sync commit: Git failed with a fatal error.
• Compiler bug related to math operations on NaN not conforming to standards, when optimization is enabled.
• Optimization error in x86 build reorders lines incorrectly.

Visual Studio 2017 version 15.7 Security Advisory Notices

Visual Studio Remote Code Execution Vulnerability (CVE-2018-8172)
A remote code execution vulnerability that can lead to exploitation of a user’s machine by opening a specially crafted project, or resource file. The security update addresses the vulnerability by correcting how Visual Studio checks the source markup of a file. For more information, see Microsoft Security Response Center article (CVE-2018-8172).

.NET Framework Remote Code Execution Vulnerability (CVE-2018-8260)
A remote code execution vulnerability exists in .NET software which can lead to exploitation of a user’s machine by allowing attackers to run arbitrary code in the context of the current user. The security update addresses the vulnerability by correcting how .NET checks the source markup of a file. For more information, see Microsoft Security Response Center article (CVE-2018-8260).

.NET Microsoft Macro Assembler Tampering Vulnerability (CVE-2018-8232)
Tampering vulnerability related to the Microsoft Macro Assembler improperly validating code. The security update addresses the vulnerability by ensuring that Microsoft Macro Assembler properly validates code logic. For more information, see Microsoft Security Response Center article (CVE-2018-8232).

ASP.NET Core Security Feature Bypass Vulnerability (CVE-2018-8171)
An ASP.NET Core Security Feature Bypass Vulnerability exists when the number of incorrect login attempts is not validated that can lead to an attacker trying infinite authentication attempts. The update addresses the vulnerability by validating the number of incorrect login attempts. For more information, see Microsoft Security Response Center (CVE-2018-8171).