What’s Vulnerable › Vulnerabilities

CVE-2019-1077

• Severity: medium (CVSS 5.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-15 · updated 2026-06-17

Description

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Affected products

• Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8): 15.9
• Microsoft Visual Studio 2019: 16.0, 16.1
• Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8): version 15.9
• Microsoft Visual Studio 2019: 16.0, 16.1

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1077
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1077

Get alerted when CVE-2019-1077 or the next vulnerability affects your stack