CVE-2020-0900: Medium severity microsoft visual studio professional 2015 vulnerability

Published Apr 15, 2020

Updated

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.

Affected Software

5 affected components

Microsoft Visual Studio 2015=update_3

Microsoft Visual Studio 2017=15.9

Microsoft Visual Studio 2019=16.0

Microsoft Visual Studio 2019=16.4

Microsoft Visual Studio 2019=16.5.0

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0900

Event History

Apr 15, 2020

CVE Published

via MITRE·03:12 PM

Data Sourced

via MITRE·03:12 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-0900?

CVE-2020-0900 is an elevation of privilege vulnerability that exists in the Visual Studio Extension Installer Service.

How does CVE-2020-0900 affect Microsoft Visual Studio?

CVE-2020-0900 affects multiple versions of Microsoft Visual Studio including 2015, 2017, and 2019.

What is the severity of CVE-2020-0900?

CVE-2020-0900 has a severity rating of 5.5, which is considered medium.

How can I fix CVE-2020-0900?

To fix CVE-2020-0900, it is recommended to install the latest security updates provided by Microsoft.

Where can I find more information about CVE-2020-0900?

You can find more information about CVE-2020-0900 on the Microsoft Security Guidance Advisory page: [link](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0900).