CVE-2019-1349

CVE-2019-1349: vulnerability in Microsoft Visual Studio 2017

Published · Updated

Follow this CVE+ Monitor Microsoft Visual Studio+ Monitor git

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 34%
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.
Affected products
Microsoft · Microsoft Visual Studio 2017Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)Microsoft · Microsoft Visual Studio 2019Microsoft · Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Related CVEs — Microsoft Visual Studio 2017

In the same product, most dangerous first.

CVE-2020-1147HIGHCVE-2020-1147EPSS 95.8%KEVCVE-2019-1350—CVE-2019-1350EPSS 25.7%CVE-2019-1352—CVE-2019-1352EPSS 24.0%CVE-2019-1354—CVE-2019-1354EPSS 22.6%CVE-2019-0613—CVE-2019-0613EPSS 15.4%CVE-2019-0809—CVE-2019-0809EPSS 10.6%