{"affected":[{"affectedData":[{"product":"Microsoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Visual Studio Code","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Microsoft Visual Studio 2019","vendor":"Microsoft","versions":[{"status":"affected","version":"16.0"}]},{"product":"Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Azure Storage Explorer","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"TypeScript","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:azure_storage_explorer:-:*:*:*:*:*:*:*","matchCriteriaId":"334D89E1-AD97-4FB3-A6F1-15DCCFDBE633","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:typescript:-:*:*:*:*:*:*:*","matchCriteriaId":"BA277009-E2BA-4587-A128-B3945124B804","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*","matchCriteriaId":"A73D1417-E2B9-4ECD-B637-46D22B21F229","versionEndExcluding":"15.9.25","versionStartIncluding":"15.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"E94E13B1-8CE6-4B86-AB58-19FAB3F92E05","versionEndExcluding":"16.0.16","versionStartIncluding":"16.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"0646F955-A55C-4DA7-A73A-0A23B51FB47C","versionEndExcluding":"16.4.11","versionStartIncluding":"16.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"F639AE14-5A14-4CFC-B2AF-AC0B458F2F14","versionEndExcluding":"16.6.4","versionStartIncluding":"16.5","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*","matchCriteriaId":"39A9B2C7-91A5-4720-98E5-33A633E7EAB2","versionEndExcluding":"1.47.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'."},{"lang":"es","value":"Se presenta una vulnerabilidad de elevación de privilegios en Visual Studio y Visual Studio Code cuando cargan dependencias de software, también se conoce como \"Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'"}],"id":"CVE-2020-1416","lastModified":"2026-06-17T03:01:21.610","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-07-14T23:15:17.760","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1416"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1416"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"nvd@nist.gov","type":"Primary"}]}