Improper Access Control in Visual Studio by Microsoft
CVE-2025-55240
7.3HIGH
Key Information:
What is CVE-2025-55240?
An improper access control vulnerability in Microsoft Visual Studio allows an authorized attacker to elevate privileges locally, potentially compromising system security and integrity. This can lead to unauthorized access to sensitive functions and data within the application.
Affected Version(s)
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Unknown 15.9.0 < 15.9.77
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Unknown 16.11.0 < 16.11.52
Microsoft Visual Studio 2022 version 17.10 Unknown 17.10.0 < 17.10.20