RCLogo Visual Studio 2019 version 16.11 Release Notes


Important

This is not the latest version of Visual Studio. To download the latest release, please visit https://visualstudio.microsoft.com/downloads/ and see the Visual Studio 2022 release notes.

Support Timeframe

Visual Studio 2019 version 16.11 is the final supported servicing baseline for Visual Studio 2019. Enterprise and Professional customers needing to adopt a long term stable and secure development environment are encouraged to standardize on this version. As explained in our lifecycle and support policy, version 16.11 will be supported with fixes and security updates through April 2029, which is the remainder of the Visual Studio 2019 product lifecycle.

You can acquire the latest most secure version of Visual Studio 2019 version 16.11, by visiting the Visual Studio site, or by going to the downloads section of my.visualstudio.com. You can get updates from the Microsoft Update catalog. For more information about Visual Studio supported baselines, please review the support policy for Visual Studio 2019.

Visual Studio 2019 Archived Release Notes

Visual Studio 2019 Blog

The Visual Studio 2019 Blog is the official source of product insight from the Visual Studio Engineering Team. You can find in-depth information about the Visual Studio 2019 releases in the following posts:

Documentation

The official Learn documentation for Visual Studio 2019 is archived. Archived documentation is not accessible to search engines, but you can still browse the archived documentation at Visual Studio 2019 documentation (Archived).

Release Notes Icon Visual Studio 2019 version 16.11.59

released August 11th, 2026

Issues Addressed in this release

  • Updated Node.js to v22.23.0 to address publicly disclosed CVEs.
Security advisories addressed CVE Description
Node.js Denial of Service Vulnerability CVE-2026-21710 A flaw in Node.js HTTP request handling allows an unauthenticated attacker to crash the process with a crafted request containing a __proto__ header.
Git for Windows Vulnerability CVE-2026-62960 This security update updates Git for Windows and MinGit to address CVE-2026-62960.

Future removal of Git for Windows Individual Component on Windows 8.1

Git for Windows is ending support for Windows 8.1, so the Git for Windows Individual Component will no longer be available through the Visual Studio Installer on Windows 8.1.

This change affects only the optional, system-wide Git installation. Git functionality built into Visual Studio is not affected. If you rely on this component, upgrade to a supported version of Windows to continue receiving current Git updates and security fixes.

Release Notes Icon Visual Studio 2019 version 16.11.58

released July 14th, 2026

Issues Addressed in this release

  • Updated MinGit to version 2.54.0.2
  • Updated MessagePack-CSharp to 2.5.301

Release Notes Icon Visual Studio 2019 version 16.11.57

released June 9th, 2026

Security advisories addressed CVE Description
SQLite Memory Corruption Vulnerability CVE-2025-6965 There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue.

Release Notes Icon Visual Studio 2019 version 16.11.56

released May 12th, 2026

Security advisories addressed CVE Description
SQLite Memory Corruption Vulnerability CVE-2025-6965 There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue.

Release Notes Icon Visual Studio 2019 version 16.11.55

released April 14th, 2026

Issues Addressed in this release

Security advisories addressed

Security advisories addressed CVE Description
SQLite Memory Corruption Vulnerability CVE-2025-6965 There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue.
Visual Studio Information Disclosure Vulnerability CVE-2026-32631 An information disclosure vulnerability exists in MinGit due to NTLM hash leak to untrusted server.
Node.js TLS DoS Vulnerability CVE-2026-21637 A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when pskCallback or ALPNCallback are in use.

NOTE: Visual Studio 2019 (16.11.55) now ships with the updated NodeJS version 22, specifically 22.21.1. It's worth noting that NodeJS 22.x will be the final release supporting 32-bit NodeJS development, marking the end of an era for those using 32-bit platforms.

NodeJS 22.x is scheduled to reach End Of Life in April 2027. Until then, Visual Studio 2019 will continue to provide updates for NodeJS 22.x as needed. However, after April 2027, security scanners might begin to flag the presence of this EOL version within Visual Studio 2019 environments. Unfortunately, since NodeJS 23 and beyond will only support 64-bit, Visual Studio 2019—being a 32-bit edition—won't be able to upgrade to newer NodeJS versions.

Given these challenges, the recommended path forward is to upgrade to Visual Studio 2022 or Visual Studio 2026 to ensure ongoing support and compatibility with future NodeJS releases. This will help maintain both security and functionality for your development environment.


Release Notes Icon Visual Studio 2019 version 16.11.54

released March 10th, 2026

Security advisories addressed

  • CVE-2025-66413 Visual Studio Information Disclosure Vulnerability - An information disclosure vulnerability exists in MinGit due to NTLM hash leak to untrusted server.

Release Notes Icon Visual Studio 2019 version 16.11.53

released November 11th, 2025

Issues Addressed in this release

  • Update Git for Windows Individual Component to v2.51.1.1

Developer Community


Release Notes Icon Visual Studio 2019 version 16.11.52

released October 14th, 2025

Issues Addressed in this release

Security advisories addressed

  • CVE-2025-55240 Visual Studio Remote Code Execution Vulnerability - Untrusted Search Path Remote Code Execution Vulnerability in Gulpfile

Release Notes Icon Visual Studio 2019 version 16.11.51

released September 9th, 2025

Issues Addressed in this release

  • This update includes fixes pertaining to Visual Studio compliance.

Release Notes Icon Visual Studio 2019 version 16.11.50

released August 12th, 2025

Issues Addressed in this release

The following Windows SDK versions have been removed from the Visual Studio 2019 installer:

  • 10.0.16299.0
  • 10.0.17134.0
  • 10.0.17763.0
  • 10.0.18362.0
  • 10.0.20348.0
  • 10.0.22000.0

If you previously installed one of these versions of the SDK using Visual Studio it will be uninstalled when you update. If your project targets any of these SDKs you may encounter a build error such as: The Windows SDK version 10.0.22000.0 was not found. Install the required version of Windows SDK or change the SDK version in the project property pages or by right-clicking the solution and selecting "Retarget solution".

To resolve this, we recommend retargeting your project to 10.0.22621.0, or an earlier supported version if necessary. For a complete list of supported SDK versions please visit: https://developer.microsoft.com/windows/downloads/sdk-archive/. If you need to install an unsupported version of the SDK, you can find it here: https://developer.microsoft.com/windows/downloads/sdk-archive/index-legacy/.


Release Notes Icon Visual Studio 2019 version 16.11.49

released July 8th, 2025

Issues Addressed in this release

Security advisories addressed


Release Notes Icon Visual Studio 2019 version 16.11.48

released June 10th, 2025

Issues Addressed in this release

  • Updated the VS installer to include the latest servicing releases for Windows SDK versions 10.0.19041.0 and 10.0.22621.0.

Release Notes Icon Visual Studio 2019 version 16.11.47

released May 13th, 2025

Issues Addressed in this release

  • Fixed an issue in the modern query work item TFVC checkin-policy that prevented the project name from being retrieved.
  • Fixed an issue in the forbidden patterns TFVC check-in policy that caused the patterns to be "forgotten" by the policy after it was created.

Security advisories addressed

  • CVE-2025-32703 Access to ETW tracing not known by Admin installing VS on the machine
  • CVE-2025-32702 Remote Code Execution due to nuget package squatting
  • CVE-2025-26646 .NET - Spoofing - Elevation of Privilege in msbuild's DownloadFile tasks default behaviors

Release Notes Icon Visual Studio 2019 version 16.11.46

released April 8th, 2025

Issues addressed in this release

  • Added support for modern TFVC Check-in Policies, as well as guidance and warnings when obsolete TFVC Check-in Policies are being applied.

Release Notes Icon Visual Studio 2019 version 16.11.45

released March 11th, 2025

Issues addressed in this release

Security advisories addressed

  • CVE-2025-25003 Visual Studio Elevation of Privilege Vulnerability
  • CVE-2025-24998 Visual Studio Installer Elevation of Privilege Vulnerability

Release Notes Icon Visual Studio 2019 version 16.11.44

released February 11th, 2025

Issues addressed in this release

Security advisories addressed

  • CVE-2025-21206 Visual Studio Installer Elevation of Privilege - Uncontrolled Search Path Element allows an unauthorized attacker to elevate privileges locally.
  • CVE-2023-32002 Node.js Module._load() policy Remote Code Execution - The use of Module._load() can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.

Release Notes Icon Visual Studio 2019 version 16.11.43

released January 14th, 2025

Issues addressed in this release

Security advisories addressed

  • CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability
  • CVE-2025-21176 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
  • CVE-2025-21178 Visual Studio Remote Code Execution Vulnerability
  • CVE-2024-50338 Carriage-return character in remote URL allows malicious repository to leak credentials

Release Notes Icon Visual Studio 2019 version 16.11.42

released November 12th, 2024

Issues addressed in this release

Developer Community


Release Notes Icon Visual Studio 2019 version 16.11.41

released October 8th, 2024

Issues addressed in this release

Security advisories addressed

  • CVE-2024-43603 Denial of Service Vulnerability in Visual Studio Collector Service
  • CVE-2024-43590 Elevation of Privilege Vulnerability in Visual Studio C++ Redistributable Installer

Release Notes Icon Visual Studio 2019 version 16.11.40

released September 10th, 2024

Issues addressed in this release

Security advisories addressed

CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability


Release Notes Icon Visual Studio 2019 version 16.11.39

released August 13th, 2024

Issues addressed in this release

  • IntelliCode model update, so users will get the models directly and are no longer dependent on backend services for downloads.

Security advisories addressed

  • CVE-2024-29187(Republished) - WiX based installers are vulnerable to binary hijack when run as SYSTEM

Release Notes Icon Visual Studio 2019 version 16.11.38

released July 9th, 2024

Issues addressed in this release

  • Version 6.2 of AzCopy is no longer distributed as part of the Azure Workload in Visual Studio due to deprecation. The latest supported release of AzCopy can be downloaded from Get started with AzCopy.
  • Update MinGit to v2.45.2.1 that includes GCM 2.5 which addresses an issue with the previous GCM version where it reported an error back to Git after cloning and made it appear like the clone had failed.

Release Notes Icon Visual Studio 2019 version 16.11.37

released June 11th, 2024

Issues addressed in this release

  • After upgrading to Germanium build of Windows, WSL requires a manual upgrade. This can cause Visual Studio to hang when opening CMake projects.

Security advisories addressed

  • CVE-2024-30052 Remote Code Execution when debugging dump files that contain a malicious file with an appropriate extension
  • CVE-2024-29060 Elevation of Privilege where affected installation of Visual Studio is running
  • CVE-2024-29187 WiX based installers are vulnerable to binary hijack when run as SYSTEM

Release Notes Icon Visual Studio 2019 version 16.11.36

released May 14th, 2024

Issues addressed in this release

  • This release includes an OpenSSL update to v3.2.1

Security advisories addressed

  • CVE-2024-32002 Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution.
  • CVE-2024-32004 Remote Code Execution while cloning special-crafted local repositories

Release Notes Icon Visual Studio 2019 version 16.11.35

released April 9th, 2024

Issues addressed in this release

  • With this bug fix, a client can now use the bootstrapper in a layout and pass in the --noWeb parameter to install on a client machine and ensure that both the installer and the Visual Studio product are downloaded only from the layout. Previously, sometimes during the installation process, the installer would not respect the -noWeb parameter and would try to self-update itself from the web.

Security advisories addressed

  • CVE-2024-28929 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28930 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28931 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28932 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28933 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28934 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28935 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28936 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28937 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28938 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28941 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-28943 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.
  • CVE-2024-29043 This update addresses a remote code execution vulnerablity in the Microsoft ODBC Driver for Microsoft SQL Server.

Release Notes Icon Visual Studio 2019 version 16.11.34

released February 13th, 2024

Issues addressed in this release

Developer Community

Security advisories addressed

  • CVE-2024-0057 A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw.

Release Notes Icon Visual Studio 2019 version 16.11.33

released January 9th, 2024

Issues Addressed in this release

  • Updated MinGit to v2.43.0.1 which comes with OpenSSL v3.1.4 and addresses a regression where network operations were really slow under certain circumstances.

Security Advisories Addressed

  • CVE-2024-20656 A vulnerability exists in the VSStandardCollectorService150 service, where local attackers can escalate privileges on hosts where an affected installation of Microsoft Visual Studio is running.
  • CVE-2023-32027 This advisory is republished to address a Microsoft ODBC Driver for SQL Server Remote Code Execution vulnerability in Visual Studio.
  • CVE-2023-32025 This advisory is republished to address a Microsoft ODBC Driver for SQL Server Remote Code Execution vulnerability in Visual Studio.
  • CVE-2023-32026 This advisory is republished to address a Microsoft ODBC Driver for SQL Server Remote Code Execution vulnerability in Visual Studio.
  • CVE-2023-29356 This advisory is republished to address a Microsoft ODBC Driver for SQL Server Remote Code Execution vulnerability in Visual Studio.
  • CVE-2023-32028 This advisory is republished to address a Microsoft SQL OLE DB Remote Code Execution vulnerability in Visual Studio.
  • CVE-2023-29349 This advisory is republished to address a Microsoft ODBC and OLE DB Remote Code Execution vulnerability in Visual Studio.

Release Notes Icon Visual Studio 2019 version 16.11.32

released November November 14th, 2023

Issues Addressed in this release

Developer Community

Security Advisories Addressed

  • CVE-2023-36042 A denial of service vulnerability exists in Visual Studio where a malformed decorated name can result in an infinite loop.

Release Notes Icon Visual Studio 2019 version 16.11.31

released October 10th, 2023