medium5.5
CVE-2025-32703
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
Impact
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Studio 2017 | from 15.0 before 15.9.73 |
| Microsoft | Visual Studio 2019 | from 16.0 before 16.11.47 |
| Microsoft | Visual Studio 2022 | from 17.8.0 before 17.8.21 from 17.10.0 before 17.10.14 from 17.12.0 before 17.12.8 from 17.13.0 before 17.13.7 |