CVE-2019-1079

6.5 mediumEPSS 6.1%

Medium (6.5) in microsoft visual studio. EPSS 6.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2019-07-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:visual_studio

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079

Check your stack JSON