CVE-2019-1079 - An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'

Back Back to CVE browser

MEDIUM

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'

Published Jul 15, 2019

6.5

MEDIUM

CVSS 3.0

EPSS 6.12%

Description

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'.

Affected products

Vendor Microsoft Product Microsoft Visual Studio Default
unknown
Affected
- 2010 Service Pack 1
- 2012 Update 5
- 2013 Update 5
- 2015 Update 3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Microsoft Visual Studio	unknown	Affected 2010 Service Pack 1 2012 Update 5 2013 Update 5 2015 Update 3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9660
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9660		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jul 15, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-1079

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-1079

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jul 15, 2019

Updated Aug 4, 2024

Link EUVD-2019-9660

GitHub

No data