CVE-2020-1416 PUBLISHED CVSS 8.800000190734863 HIGH

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

EPSS 9.87% · 92.9th percentile

Risk Scores

CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
9.87%
92.9th percentile

Affected Products

VendorProductVersions
microsoftvisual_studio_201715.0
microsoftvisual_studio_code0
MicrosoftTypeScriptunspecified
MicrosoftMicrosoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5)unspecified
MicrosoftMicrosoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)unspecified
microsoftazure_storage_explorer
microsoftvisual_studio_201916.0, 16.5, 16.1
MicrosoftVisual Studio Codeunspecified
microsofttypescript
MicrosoftAzure Storage Explorerunspecified
MicrosoftMicrosoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)unspecified
MicrosoftMicrosoft Visual Studio 201916.0

Timeline

References

Open in Interactive Console →