Not rated
CVE-2020-0900 An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles…
Description
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2019 version 16.5 | Versions not published | |
| Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) | Versions not published | |
| Microsoft Visual Studio 2019 | 16.0 | No fix stated |
| Microsoft Visual Studio | Versions not published | |
| Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2019 version 16.5
The 4 CVEs of Microsoft Visual Studio 2019 version 16.5 →
CVE-2020-1161
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests
Not rated
CVE-2020-1108
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests
Not rated
CVE-2020-0899
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file…
Not rated