VULNERABILITY INTELLIGENCE
CVE-2020-1416
CVSS score8.8 HIGH
EPSS probability5.86%
CISA KEVNot currently listed
Published2020-07-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
Weakness classification
- nvd@nist.gov: CWE-269
Primary references
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory