CVE-2020-0899: Medium severity visual studio professional 2017 vulnerability
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this elevation of privilege vulnerability?
The vulnerability ID for this elevation of privilege vulnerability is CVE-2020-0899.
What software versions are affected by this vulnerability?
The vulnerability affects Microsoft Visual Studio 2017 versions 15.9, Microsoft Visual Studio 2019 versions 16.0 and 16.4, as well as Microsoft Visual Studio 2019 version 16.5.0.
What is the severity of CVE-2020-0899?
The severity of CVE-2020-0899 is medium with a CVSS score of 5.5.
How does this vulnerability occur?
This vulnerability occurs when Microsoft Visual Studio updater service improperly handles file permissions.
Where can I find more information about CVE-2020-0899?
More information about CVE-2020-0899 can be found at the following link: <a href='https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0899'>https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0899</a>