CVE-2019-1425: Microsoft Visual Studio 2017

Medium severity, CVSS 6.5. EPSS: 3.3% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'.

Affected products

• Microsoft Visual Studio 2017: version 15.9 only
• Microsoft Visual Studio 2019: version 16.0 only; version 16.3 only

Published 2019-11-12. Last modified 2026-06-17.