high8.8
CVE-2025-49739
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Impact
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Studio | Version 2015 |
| Microsoft | Visual Studio 2017 | from 15.0 before 15.9.75 |
| Microsoft | Visual Studio 2019 | from 16.0 before 16.11.49 |
| Microsoft | Visual Studio 2022 | from 17.8.0 before 17.8.23 from 17.10.0 before 17.10.17 from 17.12.0 before 17.12.10 from 17.14.0 before 17.14.8 |