CVE-2019-1486

A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.

Score

CVSS 3.1 6.1 Medium

Status

Modified - secure@microsoft.com

Published

2019-12-10

Last modified

2024-08-04

Weaknesses

CWE-601

Affected products

• Microsoft Visual Studio 2019 (Microsoft)
• Microsoft Visual Studio 2019 Version 16.4 Includes 16.0 - 16.3 (Microsoft)
• Microsoft Visual Studio Live Share Extension (Microsoft)
• Visual Studio 2019 (Microsoft)
• Visual Studio Live Share (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1486