CVE-2020-0900: Microsoft Visual Studio 2015

Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.

Affected products

• Microsoft Visual Studio 2015: version update_3 only
• Microsoft Visual Studio 2017: version 15.9 only
• Microsoft Visual Studio 2019: version 16.0 only; version 16.4 only; version 16.5.0 only

Published 2020-04-15. Last modified 2026-06-17.