CVEvulnerability

CVE-2020-1416

8.8 HIGH Published 2020-07-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

Affected configurations

• microsoft azure storage explorer • microsoft typescript • microsoft visual studio 2017 (>= 15.0 < 15.9.25) • microsoft visual studio 2019 (>= 16.0 < 16.0.16) • microsoft visual studio 2019 (>= 16.1 < 16.4.11) • microsoft visual studio 2019 (>= 16.5 < 16.6.4) • microsoft visual studio code (< 1.47.1)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References