high7.3
CVE-2025-29803
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges l…
Impact
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sql Server Management Studio | before 20.2.1 |
| Microsoft | Visual Studio Tools For Applications 2019 | before 16.0.35907.0 |
| Microsoft | Visual Studio Tools For Applications 2019 Sdk | before 16.0.35907.0 |
| Microsoft | Visual Studio Tools For Applications 2022 | before 17.0.35906.0 |
| Microsoft | Visual Studio Tools For Applications 2022 Sdk | before 17.0.35906.0 |