CVE-2019-0546 is a remote code execution vulnerability affecting Microsoft Visual Studio 2017. It arises from the C++ compiler's improper handling of specific C++ constructs, allowing an attacker to execute arbitrary code. With a CVSS score of 7.8 (High), this vulnerability has a high potential impact on confidentiality, integrity, and availability, requiring user interaction for exploitation. While not currently listed in CISA's KEV catalog, its FAUCET Risk Score of 93/100 and EPSS score of 0.2762 indicate a significant risk, despite no public exploit code (Metasploit, Nuclei, ExploitDB) or widespread community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
15.9CPE matchmatch criteria | cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.