CVE-2019-1077: Medium severity visual studio professional 2017 vulnerability

Published Jul 15, 2019

Updated

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Affected Software

3 affected components

Microsoft Visual Studio 2017=15.9

Microsoft Visual Studio 2019=16.0

Microsoft Visual Studio 2019=16.1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1077

Event History

Jul 15, 2019

CVE Published

via MITRE·06:56 PM

Data Sourced

via MITRE·06:56 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-1077?

CVE-2019-1077 is an elevation of privilege vulnerability in the Visual Studio updater service.

How does CVE-2019-1077 impact Microsoft Visual Studio?

CVE-2019-1077 affects Microsoft Visual Studio 2017 versions 15.9, Microsoft Visual Studio 2019 versions 16.0, and Microsoft Visual Studio 2019 versions 16.1.

What is the severity of CVE-2019-1077?

CVE-2019-1077 has a severity level of medium.

How can I fix the CVE-2019-1077 vulnerability?

To fix the CVE-2019-1077 vulnerability, update your Microsoft Visual Studio software to the latest version available.

Where can I find more information about CVE-2019-1077?

You can find more information about CVE-2019-1077 at the Microsoft Security Response Center advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1077