60
CVE-2019-1425
—CVSS 3.1
6.5 medium
EPSS
3%p88
Published
()
Modified
Description
An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'.
- Vendors
- microsoft
- Products
- visual studio 2017, visual studio 2019
- Weakness
- CWE-59
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N