CVE-2020-17156
HIGHVisual Studio 2017 15.0-15.8 and 2019 16.0-16.7 - Remote Code Execution
Title source: llmDescription
Visual Studio Remote Code Execution Vulnerability
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17156
Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17156
Scores
CVSS v3
7.8
EPSS
0.0288
EPSS Percentile
85.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
Status
published
Products (7)
Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
15.9.0 - publication
Microsoft/Microsoft Visual Studio 2019 version 16.0
16.0 - publication
Microsoft/Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
16.0 - publication
Microsoft/Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
16.0.0 - publication
Microsoft/Microsoft Visual Studio 2019 version 16.8
16.0 - publication
microsoft/visual_studio_2017
15.0 - 15.9
microsoft/visual_studio_2019
16.0 - 16.8
Published
Dec 10, 2020
Tracked Since
Feb 18, 2026