High · 7.3 CVE-2025-55240 EUVD-2025-34347GHSA-2r4x-qmjj-x52w

Visual Studio Elevation of Privilege Vulnerability

Published Oct 14, 2025 · Updated Feb 26, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Product: Microsoft Visual Studio 2022 version 17.10 Product: Microsoft Visual Studio 2022 version 17.12 Product: Microsoft Visual Studio 2022 version 17.14

Description

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	15.9.0 – < 15.9.77	15.9.77
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	16.11.0 – < 16.11.52	16.11.52
Microsoft	Microsoft Visual Studio 2022 version 17.10	17.10.0 – < 17.10.20	17.10.20
Microsoft	Microsoft Visual Studio 2022 version 17.12	17.12.0 – < 17.12.13	17.12.13
Microsoft	Microsoft Visual Studio 2022 version 17.14	17.14.0 – < 17.14.17	17.14.17

Advisories 3

WID-SEC-2025-2278 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 21, 2026
NCSC-2025-0313 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Oct 14, 2025
MSRC-CVE-2025-55240 Visual Studio Elevation of Privilege Vulnerability Microsoft Security Response Center · Oct 14, 2025

References

Visual Studio Elevation of Privilege Vulnerability vendor-advisory patch