Vulnerability Intelligence Report
CVE-2020-1416
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
No Active Exploit Signals
CVSS Base Score
8.8
HIGH
EPSS Probability:5.86%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Microsoft | Microsoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5) | unspecified (affected) |
| Microsoft | Visual Studio Code | unspecified (affected) |
| Microsoft | Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) | unspecified (affected) |
| Microsoft | Microsoft Visual Studio 2019 | 16.0 (affected) |
| Microsoft | Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) | unspecified (affected) |
| Microsoft | Azure Storage Explorer | unspecified (affected) |
| Microsoft | TypeScript | unspecified (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
5.862%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Microsoft Corporation · Vendor · USA |
| Reserved | 2019-11-04T00:00:00 |
| Published | 2020-07-14T22:54:34 |
| Last Updated | 2024-08-04T06:39:09 |
Community Chatter & Buzz