7.3
High
CVE-2025-29802 Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally
Description
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.8 17.8 | 17.8.0 → < 17.8.20 | 17.8.20 |
| Microsoft Visual Studio 2022 version 17.10 17.10 | 17.10.0 → < 17.10.13 | 17.10.13 |
| Microsoft Visual Studio 2022 version 17.12 17.12 | 17.12.0 → < 17.12.7 | 17.12.7 |
References
- Visual Studio Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2022 version 17.8
The 62 CVEs of Microsoft Visual Studio 2022 version 17.8 →
CVE-2025-49739
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to…
8.8
High
CVE-2025-47959
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an…
7.1
High
CVE-2025-30399
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network
7.5
High
CVE-2025-26646
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized…
8.0
High