VDB
CVE-2020-0900
CVE-2020-0900
PUBLISHED
CVSS 5.5 MEDIUM
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.
EPSS 0.33% · 55.9th percentile
Risk Scores
CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.33%
55.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Visual Studio 2019 version 16.5 | unspecified |
| Microsoft | Microsoft Visual Studio 2019 | 16.0 |
| Microsoft | Microsoft Visual Studio | 2015 Update 3 |
| Microsoft | Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) | unspecified |
| microsoft | visual_studio_2019 | 16.4, 16.0, 16.5.0 |
| microsoft | visual_studio_2017 | 15.9 |
| Microsoft | Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) | * |
| microsoft | visual_studio_2015 | update_3 |
Timeline
- Apr 15, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 22, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 25, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 27, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 2, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Nov 5, 2022 EPSS Score