An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated
An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated attacker would need to modify Git configuration files on a system prior to a full installation of the application. The…
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Visual Studio 2017 | 15.0 |
| Microsoft | Microsoft Visual Studio 2017 version 15.9 (includes 15.0 | 15.8) — 15.9.0 |
| Microsoft | Microsoft Visual Studio 2019 version 16.0 | 16.0 |
| Microsoft | Microsoft Visual Studio 2019 version 16.2 | 16.0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.