CVE-2020-0899: falha em Microsoft Visual Studio 2017 version 15.9…
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.8%
probabilidade de exploração
0.8%top 44% das CVEs
exploração observada
nãonenhuma fonte reporta
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
Produtos afetados
Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)Microsoft · Microsoft Visual Studio 2019Microsoft · Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)Microsoft · Microsoft Visual Studio 2019 version 16.5CVEs relacionadas — Microsoft Visual Studio 2017 version 15.9…
No mesmo produto, das mais perigosas para as menos.
CVE-2020-1147HIGHCVE-2020-1147EPSS 94.0%KEVCVE-2021-27068HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 53.6%CVE-2021-36952HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 51.5%CVE-2019-1349—CVE-2019-1349EPSS 34.0%CVE-2021-26701HIGH.NET Core Remote Code Execution VulnerabilityEPSS 30.1%CVE-2019-1350—CVE-2019-1350EPSS 25.7%