CVE-2020-0900

5.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Visual Studio 2019 Version 16.5; Microsoft Visual Studio 2017 Version 15.9 (includes 15.1 - 15.8); Microsoft Visual Studio 2019; Microsoft Visual Studio
Vendor: CVE Published:; 15 April 2020

Summary

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.

Affected Version(s)

Microsoft Visual Studio 2015 Update 3

Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) = unspecified

Microsoft Visual Studio 2019 16.0

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 15, 2020
Vulnerability Reserved
Nov 4, 2019

Collectors

NVD DatabaseMitre Database