CVE-2019-1486

MEDIUM

Visual Studio Live Share < 1.0.1374 - Open Redirect via Session Host URL

Title source: llm

Description

A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1486

Scores

CVSS v3 6.1

EPSS 0.0148

EPSS Percentile 70.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (2)

microsoft/visual_studio_2019 16.0 - 16.4

microsoft/visual_studio_live_share < 1.0.1374

Published Dec 10, 2019

Tracked Since Feb 18, 2026