What is CVE-2019-0546?

CVE-2019-0546 is a high-severity vulnerability in Microsoft Visual Studio. CVSS score: 7.8/10. Published 2019-01-08.

How severe is CVE-2019-0546?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Microsoft Visual Studio

CVE-2019-0546

A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio.

EPSS: 0.161 (96.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Microsoft Visual Studio — versions 2017 version 15.9
Microsoft Visual_studio_2017 — versions 15.9

References

secure@microsoft.com (x_refsource_CONFIRM, Vendor Advisory)
secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-0546?: CVE-2019-0546 is a high-severity vulnerability in Microsoft Visual Studio. CVSS score: 7.8/10. Published 2019-01-08.
How severe is CVE-2019-0546?: High severity. CVSS v3 base score is 7.8 out of 10.