High · 7.3 CVE-2025-25003 EUVD-2025-6345GHSA-f4rv-pm79-f3jj

Visual Studio Elevation of Privilege Vulnerability

Published Mar 11, 2025 · Updated Feb 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Product: Microsoft Visual Studio 2022 version 17.10 Product: Microsoft Visual Studio 2022 version 17.12 Product: Microsoft Visual Studio 2022 version 17.13 Product: Microsoft Visual Studio 2022 version 17.8

Description

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	16.11.0 – < 16.11.45	16.11.45
Microsoft	Microsoft Visual Studio 2022 version 17.10	17.10.0 – < 17.10.12	17.10.12
Microsoft	Microsoft Visual Studio 2022 version 17.12	17.12.0 – < 17.12.6	17.12.6
Microsoft	Microsoft Visual Studio 2022 version 17.13	17.13.0 – < 17.13.3	17.13.3
Microsoft	Microsoft Visual Studio 2022 version 17.8	17.8.0 – < 17.8.19	17.8.19

Advisories 3

WID-SEC-2025-0539 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 7, 2025
NCSC-2025-0079 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Mar 11, 2025
MSRC-CVE-2025-25003 Visual Studio Elevation of Privilege Vulnerability Microsoft Security Response Center · Mar 11, 2025

References

Visual Studio Elevation of Privilege Vulnerability vendor-advisory patch