CVE-2020-0884: Microsoft Visual Studio 2017

Low severity, CVSS 3.7. EPSS: 1.7% chance of exploitation in the next 30 days.

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.

Affected products

• Microsoft Visual Studio 2017: from 15.1, up to and including 15.8
• Microsoft Visual Studio 2019: from 16.0, up to and including 16.3

Published 2020-03-12. Last modified 2026-06-17.