high7.3
CVE-2025-24998
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
Impact
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Studio 2017 | from 15.0 before 15.9.71 |
| Microsoft | Visual Studio 2019 | from 16.0 before 16.11.45 |
| Microsoft | Visual Studio 2022 | from 17.8.0 before 17.8.19 from 17.10.0 before 17.10.12 from 17.12.0 before 17.12.6 from 17.13.0 before 17.13.3 |