CVE-2019-1486
Medium
Description
A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'.
SeverityMedium
CVSS6.1
Exploit probability—
Product
Microsoft Visual Studio
PublishedDec 10, 2019
First seenDec 10, 2019
How to fix
Update
- microsoft visual_studio_live_share1.0.1374 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft visual_studio_2019 | 16.0 ≤ v ≤ 16.4 | — |
| microsoft visual_studio_live_share | v < 1.0.1374 | 1.0.1374 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.