Microsoft Visual Studio CVE-2019-1077 Local Privilege Escalation Vulnerability

Bugtraq ID:	108931
Class:	Design Error
CVE:	CVE-2019-1077
Remote:	No
Local:	Yes
Published:	Jul 09 2019 12:00AM
Updated:	Jul 09 2019 12:00AM
Credit:	Ryan Wincey (@rwincey) of Securifera
Vulnerable:	Microsoft Visual Studio 2019 16.1 Microsoft Visual Studio 2019 16.0 Microsoft Visual Studio 2017 15.9
Not Vulnerable:

Microsoft Visual Studio CVE-2019-1077 Local Privilege Escalation Vulnerability

Microsoft Visual Studio is prone to a local privilege-escalation vulnerability.

An attackers may exploit this issue to gain elevated privileges.

Microsoft Visual Studio CVE-2019-1077 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Visual Studio CVE-2019-1077 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Visual Studio CVE-2019-1077 Local Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2019-1077 | Visual Studio Elevation of Privilege Vulnerability (Microsoft)