.NET and Visual Studio Elevation of Privilege Vulnerability

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send the user a malicious file and convince them to open it.

What privileges could be gained by an attacker who successfully exploited the vulnerability?
Low-privilege attackers who successfully exploited the vulnerability could potentially write malicious configurations and download malicious files.

According to the CVSS metric, user interaction is required (UI:R) and privileges required  is low (PR:L). What does that mean for this vulnerability?
An authorized attacker must send the user a malicious file and convince the user to open it.

Security updates
6.0.18 — https://support.microsoft.com/help/5027797
7.0.7 — https://support.microsoft.com/help/5027798
17.2.16 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes
17.0.22 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.0
17.4.8 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes