Skip to content
OpenAdvisories
High MSRC-CVE-2022-24513 1 CVE

Visual Studio Elevation of Privilege Vulnerability

Published Apr 12, 2022 · Updated Jul 12, 2022 · Revision 4

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
15.9.49 — https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes
16.7.27 — https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7
16.9.23 — https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9
8.10.24 — https://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes
16.11.16 — https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11
17.0.12 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.0
17.1.7 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.1.md
17.0.3 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/mac-release-notes

Vulnerabilities 1

Revision history

  1. #4

    Microsoft has released July 2022 security updates to further address CVE-2022-24513 for Visual Studio 2019 version 16.9 and Microsoft Visual Studio 2022 version 17.0. Microsoft strongly recommends that customers install these updates to be fully protected from the vulnerability.

  2. #3

    Microsoft has released the June 2022 security updates to further address CVE-2022-24513 for the following supported versions of Visual Studio: Visual Studio 2017 version 15.9, Visual Studio 2019 version 16.9, Visual Studio 2019 version 16.11, Microsoft Visual Studio 2022 version 17.0, and Visual Studio 2019 for Mac version 8.10. In addition, Visual Studio 2022 for Mac version 17.0 has been added to the Security Updates table as it is also affected by this vulnerability. Microsoft strongly recommends that customers install these updates to be fully protected from the vulnerability.

  3. #2

    To comprehensively address CVE-2022-24513, Microsoft has released May 2022 security updates for the following supported versions of Visual Studio: Visual Studio 2017 version 15.9, Visual Studio 2019 version 16.9, Visual Studio 2019 version 16.11, Microsoft Visual Studio 2022 version 17.0, and Microsoft Visual Studio 2022 version 17.1. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability.

  4. #1

    Information published.

References