CVE-2020-17156: Visual Studio Remote Code Execution Vulnerability
Published Dec 8, 2020
·Updated
Visual Studio Remote Code Execution Vulnerability
Affected Software
7 affected componentsFixes available
Microsoft Visual Studio 2017>=15.0<=15.9
Microsoft Visual Studio 2019>=16.0<=16.8
Microsoft Visual Studio 2019 (includes 16.0 - 16.3)=16.4
Microsoft Visual Studio 2019 (includes 16.0 – 16.6)=16.7
Microsoft Visual Studio 2019=16.0
Microsoft Visual Studio 2019=16.8
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Remediation
Event History
Dec 8, 2020
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
DescriptionSeverity
Dec 9, 2020
CVE Published
via MITRE·11:36 PM
Data Sourced
via MITRE·11:36 PM
DescriptionSeverity
Dec 10, 2020
Data Sourced
via NVD·12:15 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-17156?
CVE-2020-17156 is a Visual Studio Remote Code Execution Vulnerability.
2
Which versions of Microsoft Visual Studio are affected by CVE-2020-17156?
CVE-2020-17156 affects Microsoft Visual Studio 2017 versions 15.0 to 15.9 and Microsoft Visual Studio 2019 versions 16.0 to 16.8.
3
What is the severity of CVE-2020-17156?
CVE-2020-17156 has a severity level of 7.8 (high).
4
How can I fix CVE-2020-17156?
To fix CVE-2020-17156, Microsoft has released security updates. Please refer to the following reference for more information: [link](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17156)
5
Where can I find more information about CVE-2020-17156?
You can find more information about CVE-2020-17156 at the following reference: [link](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17156)