CVE-2020-0899
First published: Wed Apr 15 2020(Updated: )
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Visual Studio 2017 | =15.9 | |
| Microsoft Visual Studio 2019 | =16.0 | |
| Microsoft Visual Studio 2019 | =16.4 | |
| Microsoft Visual Studio 2019 | =16.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this elevation of privilege vulnerability?
The vulnerability ID for this elevation of privilege vulnerability is CVE-2020-0899.
What software versions are affected by this vulnerability?
The vulnerability affects Microsoft Visual Studio 2017 versions 15.9, Microsoft Visual Studio 2019 versions 16.0 and 16.4, as well as Microsoft Visual Studio 2019 version 16.5.0.
What is the severity of CVE-2020-0899?
The severity of CVE-2020-0899 is medium with a CVSS score of 5.5.
How does this vulnerability occur?
This vulnerability occurs when Microsoft Visual Studio updater service improperly handles file permissions.
Where can I find more information about CVE-2020-0899?
More information about CVE-2020-0899 can be found at the following link: <a href='https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0899'>https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0899</a>
- collector/nvd-index
- agent/type
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft visual studio 2017
- version/microsoft visual studio 2017/15.9
- canonical/microsoft visual studio 2019
- version/microsoft visual studio 2019/16.0
- version/microsoft visual studio 2019/16.4
- version/microsoft visual studio 2019/16.5.0