Skip to content
Sign in
CVE-2020-0884Not scoredCWE-319

CVE-2020-0884: Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) vulnerability

Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)

Affected: Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.7%probability of exploitation in the next 30 days

Percentile not published

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.

Affected products3

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)Versions not stated
  • Microsoft · Microsoft Visual Studio 201916.0
  • Microsoft · Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)Versions not stated

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Microsoft
Published
March 2020

CoverageNo articles yet

No CyberSIXT article names CVE-2020-0884 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in