Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
2025-05-13T17:16:03.080
2025-05-19T18:30:21.637
Analyzed
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | visual_studio_2017 | < 15.9.73 | Yes |
| Application | microsoft | visual_studio_2019 | < 16.11.47 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.8.21 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.10.14 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.12.8 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.13.7 | Yes |