CVE-2020-1416
First published: Tue Jul 14 2020(Updated: )
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Azure Storage Explorer | ||
| Microsoft Typescript | ||
| Microsoft Visual Studio 2017 | >=15.0<15.9.25 | |
| Microsoft Visual Studio 2019 | >=16.0<16.0.16 | |
| Microsoft Visual Studio 2019 | >=16.1<16.4.11 | |
| Microsoft Visual Studio 2019 | >=16.5<16.6.4 | |
| Microsoft Visual Studio Code | <1.47.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-1416?
CVE-2020-1416 is an elevation of privilege vulnerability in Visual Studio and Visual Studio Code.
Which software is affected by CVE-2020-1416?
Software affected by CVE-2020-1416 includes Microsoft Azure Storage Explorer, Microsoft Typescript, Microsoft Visual Studio 2017 (version 15.0 and later), Microsoft Visual Studio 2019 (version 16.0 to 16.6.4), and Microsoft Visual Studio Code (up to version 1.47.1).
What is the severity of CVE-2020-1416?
CVE-2020-1416 has a severity rating of 8.8 (Critical).
How does CVE-2020-1416 exploit the vulnerability?
CVE-2020-1416 exploits an elevation of privilege vulnerability that occurs when Visual Studio and Visual Studio Code load software dependencies.
Is there a fix available for CVE-2020-1416?
Yes, Microsoft has released security updates to address the CVE-2020-1416 vulnerability. It is recommended to update the affected software to the latest version.
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/remedy
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft azure storage explorer
- canonical/microsoft typescript
- canonical/microsoft visual studio 2017
- version/microsoft visual studio 2017/15.0
- canonical/microsoft visual studio 2019
- version/microsoft visual studio 2019/16.0
- version/microsoft visual studio 2019/16.1
- version/microsoft visual studio 2019/16.5
- canonical/microsoft visual studio code