CVE-2019-1077

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Score

CVSS 3.0 5.0 Medium

Status

Modified - secure@microsoft.com

Published

2019-07-15

Last modified

2024-08-04

Affected products

• Microsoft Visual Studio 2017 (Microsoft)
• Microsoft Visual Studio 2019 (Microsoft)
• Visual Studio 2017 (Microsoft)
• Visual Studio 2019 (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1077