CVE-2024-49044

Summary

Visual Studio Elevation of Privilege Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft Visual Studio 2022 version 17.617.6.0 < 17.6.21affected
MicrosoftMicrosoft Visual Studio 2022 version 17.817.8.0 < 17.8.16affected
MicrosoftMicrosoft Visual Studio 2022 version 17.1017.10 < 17.10.9affected
MicrosoftMicrosoft Visual Studio 2022 version 17.1117.11 < 17.11.6affected

Weaknesses

  • CWE-284: CWE-284: Improper Access Control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References