VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-0900

CVE-2020-0900

Description

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.

Affected products

11
  • Microsoft/Visual Studio 2015
    cpe:2.3:a:microsoft:visual_studio_2015:update_3:*:*:*:*:*:*:*
  • Microsoft/Visual Studio 2017
    cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*
  • Microsoft/Visual Studio4 versions
    cpe:2.3:a:microsoft:visual_studio_2019:16.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:visual_studio_2019:16.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2019:16.4:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2019:16.5.0:*:*:*:*:*:*:*
    • (no CPE)range: 2015 Update 3
  • Microsoft/Visual Studio Extension Installer Servicellm-fuzzy
  • Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019v5
    Range: 16.0
  • Microsoft/Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019 version 16.5v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.