CVE-2019-1486: Medium severity visual studio enterprise 2019 vulnerability
A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1486?
CVE-2019-1486 has a severity rating of important, indicating a significant risk to users and systems.
How do I fix CVE-2019-1486?
To address CVE-2019-1486, update Microsoft Visual Studio 2019 to version 16.4 or later, and Microsoft Visual Studio Live Share to version 1.0.1374 or later.
What is the impact of CVE-2019-1486?
The impact of CVE-2019-1486 is that it allows a guest in a Visual Studio Live Share session to be redirected to an arbitrary URL, which can lead to spoofing attacks.
Who is affected by CVE-2019-1486?
Users of Microsoft Visual Studio 2019 versions from 16.0 to 16.4 and Microsoft Visual Studio Live Share versions up to 1.0.1374 are affected by CVE-2019-1486.
Is CVE-2019-1486 exploitable remotely?
Yes, CVE-2019-1486 is exploitable remotely, allowing an attacker to redirect users to potentially harmful URLs.