Low severity3.7NVD Advisory· Published Mar 12, 2020· Updated Jun 17, 2026
CVE-2020-0884
CVE-2020-0884
Description
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
Affected products
6- cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*Range: >=15.1,<=15.8
cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*range: >=16.0,<=16.3
- (no CPE)
- Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)v5Range: unspecified
- Microsoft/Microsoft Visual Studio 2019v5Range: 16.0
- Microsoft/Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)v5Range: unspecified
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.