CVE-2019-1077: Microsoft Visual Studio 2017

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Affected products

• Microsoft Visual Studio 2017: version 15.9 only
• Microsoft Visual Studio 2019: version 16.0 only; version 16.1 only

Published 2019-07-15. Last modified 2026-06-17.