VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 14, 2020· Updated Jun 17, 2026

CVE-2020-1416

CVE-2020-1416

Description

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

Affected products

14
  • Microsoft/Azure Storage Explorer
    cpe:2.3:a:microsoft:azure_storage_explorer:-:*:*:*:*:*:*:*
  • Microsoft/Typescript
    cpe:2.3:a:microsoft:typescript:-:*:*:*:*:*:*:*
  • Microsoft/Visual Studio 2017
    cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
    Range: >=15.0,<15.9.25
  • Microsoft/Visual Studio3 versions
    cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*range: >=16.0,<16.0.16
    • (no CPE)
    • (no CPE)range: unspecified
  • Microsoft/Visual Studio Code2 versions
    cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*range: <1.47.1
    • (no CPE)
  • Microsoft/Azure Iot Explorercpe-rescue
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019v5
    Range: 16.0
  • Microsoft/Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5)v5
    Range: unspecified
  • Microsoft/TypeScriptv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.