microsoft visual-studio-2015 CVE-2020-0900 vulnerability in Microsoft Products
Published on April 15, 2020

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.

NVD


Products Associated with CVE-2020-0900

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

 
 
 

Affected Versions

Microsoft Visual Studio 2019 version 16.5: Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8): Microsoft Visual Studio 2019: Microsoft Visual Studio: Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3):

Exploit Probability

EPSS
0.33%
Percentile
55.34%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.