NetSight
medium5.0

CVE-2019-1077

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Priv…

Impact

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Affected products

VendorProductAffected versions
MicrosoftVisual Studio 2017
Version 15.9
MicrosoftVisual Studio 2019
Versions 16.0, 16.1

References