Medium · 5.5 CVE-2024-43603 EUVD-2024-40354GHSA-8mp2-xq24-ffh7

Visual Studio Collector Service Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Visual Studio 2015 Update 3 Product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Product: Microsoft Visual Studio 2022 version 17.10 Product: Microsoft Visual Studio 2022 version 17.11 Product: Microsoft Visual Studio 2022 version 17.6 Product: Microsoft Visual Studio 2022 version 17.8

Description

Visual Studio Collector Service Denial of Service Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Visual Studio 2015 Update 3	14.0.0 – < 14.0.27561.00	14.0.27561.00
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	15.9.0 – < 15.9.67	15.9.67
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	16.11.0 – < 16.11.41	16.11.41
Microsoft	Microsoft Visual Studio 2022 version 17.10	17.10 – < 17.10.8	17.10.8
Microsoft	Microsoft Visual Studio 2022 version 17.11	17.11 – < 17.11.5	17.11.5
Microsoft	Microsoft Visual Studio 2022 version 17.6	17.6.0 – < 17.6.20	17.6.20
Microsoft	Microsoft Visual Studio 2022 version 17.8	17.8.0 – < 17.8.15	17.8.15

Advisories 3

WID-SEC-2024-3124 Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Oct 7, 2025
NCSC-2024-0395 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Oct 8, 2024
MSRC-CVE-2024-43603 Visual Studio Collector Service Denial of Service Vulnerability Microsoft Security Response Center · Oct 8, 2024

References

Visual Studio Collector Service Denial of Service Vulnerability vendor-advisory patch