Microsoft Visual Studio Extension Installer Service Elevation of Privilege Vulnerability

🗓️ 16 Apr 2020 00:00:00Reported by China National Vulnerability DatabaseType

Privilege elevation in Visual Studio Extension Installer Service allows arbitrary code execution due to improper file permissions.

Reporter	Title	Published	Views	Family All 14
Information Security Automation	Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities	26 Apr 202001:24	–	avleonov
BDU FSTEC	The vulnerability of the Extension Installer Service, a component of the Microsoft Visual Studio software development tool, allows a malicious individual to escalate their privileges.	19 May 202000:00	–	bdu_fstec
Circl	CVE-2020-0900	15 Apr 202019:14	–	circl
CVE	CVE-2020-0900	15 Apr 202015:12	–	cve
Cvelist	CVE-2020-0900	15 Apr 202015:12	–	cvelist
EUVD	EUVD-2020-2368	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: April 14, 2020	14 Apr 202007:00	–	mskb
Kaspersky	KLA11748 Multiple vulnerabilities in Microsoft Developer Tools	14 Apr 202000:00	–	kaspersky
Microsoft CVE	Visual Studio Extension Installer Service Elevation of Privilege Vulnerability	14 Apr 202007:00	–	mscve
NVD	CVE-2020-0900	15 Apr 202015:15	–	nvd