CVE-2020-0900

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Visual Studio 2019 version 16.5	unspecified
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)	unspecified
Microsoft	Microsoft Visual Studio 2019	16.0
Microsoft	Microsoft Visual Studio	2015 Update 3
Microsoft	Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)	unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0900Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0900Patch, Vendor Advisory

Timeline

Published: Apr 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-09019.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An at CVE-2020-09029.8An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation CVE-2020-09035.4A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request CVE-2020-09046.5A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from CVE-2020-09058.0An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution V CVE-2020-09068.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'CVE-2020-09077.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics CVE-2020-09087.5A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully CVE-2020-09097.5A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exp CVE-2020-09108.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us CVE-2020-09117.8An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who succe CVE-2020-09127.0An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exp