CVE-2019-1425

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Score

CVSS 3.1 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2019-11-12

Last modified

2024-08-04

Weaknesses

CWE-59

Affected products

• Microsoft Visual Studio 2017 (Microsoft)
• Microsoft Visual Studio 2019 (Microsoft)
• Visual Studio 2017 (Microsoft)
• Visual Studio 2019 (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1425