CVE-2019-1425

CVE-2019-1425

EPSS 3.1%

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Affected products

Microsoft · Microsoft Visual Studio 2017 Microsoft · Microsoft Visual Studio 2019

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1425