CVE-2025-29802

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-29804

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment, related to unlimited resource distribution, allows attackers to trigger service failures.

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft Visual Studio Elevation of Privilege Vulnerability

Microsoft Visual Studio is a family of development toolkits from Microsoft Corporation in the United States and is a fundamentally complete set of development tools. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to elevate...

The vulnerability of the `gf_opus_parse_packet_header` function in the `media_tools/av_parsers.c` file, implemented by the MP4Box packaging tool for the GPAC multimedia platform, allows a hacker to cause a service failure.

The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file, belonging to the MP4Box packaging tool of the GPAC multimedia platform, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications (VSTA) is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications VSTA is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to increase their privileges...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft fixed vulnerabilities in Visual Studio and .NET A malicious party could exploit the vulnerabilities to cause a denial-of-service, grant themselves elevated privileges and/or execute arbitrary code with developer privileges. Because developers tend to work under elevated privileges, it...

CVE-2025-29804

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-29802

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-29802

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-29804

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-26682

CVE-2025-26682 affects ASP.NET Core and Visual Studio components. The root cause is Allocation of resources without limits or throttling, allowing an unauthorized network attacker to cause a Denial of Service. The issue is referenced across multiple advisories (e.g., NVD/MSRC/MS Knowledge Base) a...

CVE-2025-26682 ASP.NET Core and Visual Studio Denial of Service Vulnerability

...

CVE-2025-26682 ASP.NET Core and Visual Studio Denial of Service Vulnerability

...

CVE-2025-29804 Visual Studio Elevation of Privilege Vulnerability

...

CVE-2025-29804 Visual Studio Elevation of Privilege Vulnerability

...

CVE-2025-29804

CVE-2025-29804 is an elevation-of-privilege vulnerability in Microsoft Visual Studio caused by improper access control. A local attacker with LOW privileges and requiring user interaction could elevate privileges on affected Visual Studio components. Public notes reference affected Visual Studio ...

CVE-2025-29802 Visual Studio Elevation of Privilege Vulnerability

...

CVE-2025-29802

CVE-2025-29802 (Visual Studio Elevation of Privilege) is a local elevation-of-privilege vulnerability in Microsoft Visual Studio caused by improper access control. The issue affects Visual Studio-related components (e.g., Visual Studio 2022 up to version 17.12 and related tooling) and can be expl...