CVE-2019-1351: Microsoft Visual Studio 2017

High severity, CVSS 7.5. EPSS: 8.7% chance of exploitation in the next 30 days.

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.

Affected products

• Microsoft Visual Studio 2017: from 15.0, before 15.9.18 (fixed in 15.9.18)
• Microsoft Visual Studio 2019: from 16.0, before 16.4.1 (fixed in 16.4.1)
• Opensuse Leap: version 15.1 only

Published 2020-01-24. Last modified 2026-06-17.