CVE-2020-1416

CVE-2020-1416: falha em Microsoft Visual Studio Code

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Microsoft Visual Studio+ Monitorar Visual Studio Code

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.9%
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
Produtos afetados
Microsoft · Azure Storage ExplorerMicrosoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)Microsoft · Microsoft Visual Studio 2019Microsoft · Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)Microsoft · Microsoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5)Microsoft · TypeScriptMicrosoft · Visual Studio Code
CVEs relacionadas — Microsoft Visual Studio Code

No mesmo produto, das mais perigosas para as menos.

CVE-2020-1147HIGHCVE-2020-1147EPSS 95.8%KEVCVE-2021-36952HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 51.5%CVE-2019-1349—CVE-2019-1349EPSS 34.0%CVE-2021-26701HIGH.NET Core Remote Code Execution VulnerabilityEPSS 30.1%CVE-2019-1350—CVE-2019-1350EPSS 25.7%CVE-2019-1352—CVE-2019-1352EPSS 24.0%