VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 10, 2019· Updated Jun 17, 2026

CVE-2019-1486

CVE-2019-1486

Description

A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.

Affected products

6
  • Microsoft/Visual Studio
    cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
    Range: >=16.0,<=16.4
  • Microsoft/Visual Studio Live Share2 versions
    cpe:2.3:a:microsoft:visual_studio_live_share:*:*:*:*:*:visual_studio:*:*+ 1 more
    • cpe:2.3:a:microsoft:visual_studio_live_share:*:*:*:*:*:visual_studio:*:*range: <1.0.1374
    • (no CPE)
  • Microsoft/Microsoft Visual Studio 2019v5
    Range: 16.0
  • Microsoft/Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio Live Share extensionv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.