CVE-2019-1350: Microsoft Visual Studio 2017

High severity, CVSS 8.8. EPSS: 25.7% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.

Affected products

• Microsoft Visual Studio 2017: from 15.0, before 15.9.18 (fixed in 15.9.18)
• Microsoft Visual Studio 2019: from 16.0, before 16.4.1 (fixed in 16.4.1)

Published 2020-01-24. Last modified 2026-06-17.