CVE-2020-1416

Published: Jul 14, 2020Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

Affected (7)

Products: Microsoft: Azure Storage Explorer, Typescript, Visual Studio 2017, Visual Studio 2019, Visual Studio Code

Microsoft

5 products

Azure Storage Explorer

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Azure Storage Explorer	All versions
Microsoft Typescript	All versions
Microsoft Visual Studio 2017	15.0 ≤ version < 15.9.25
Microsoft Visual Studio 2019	16.0 ≤ version < 16.0.16
Microsoft Visual Studio 2019	16.1 ≤ version < 16.4.11
Microsoft Visual Studio 2019	16.5 ≤ version < 16.6.4
Microsoft Visual Studio Code	version < 1.47.1

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1416

Source: secure@microsoft.com

PatchVendor Advisory

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1416

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.