CVE-2024-30052

MEDIUM

Microsoft Visual Studio - Remote Code Execution

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-30052. PoCs published by ynwarcs.

AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2024-30052, which involves manipulating PDB (Program Database) files to embed malicious content. The builder tool generates a crafted executable with an embedded PDB file, likely exploiting a vulnerability in how the PDB file is processed.

Description

Visual Studio Remote Code Execution Vulnerability

Exploits (1)

nomisec WORKING POC 12 stars
by ynwarcs · poc
https://github.com/ynwarcs/CVE-2024-30052

This repository contains a functional exploit PoC for CVE-2024-30052, which involves manipulating PDB (Program Database) files to embed malicious content. The builder tool generates a crafted executable with an embedded PDB file, likely exploiting a vulnerability in how the PDB file is processed.

Classification
Working Poc 95%
Attack Type
Other
Complexity
Complex
Reliability
Theoretical
Target: Microsoft Visual Studio 2022 (or related .NET tooling)
No auth needed
Prerequisites: Access to a system with Microsoft Visual Studio 2022 installed · Ability to compile and execute C# code
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Patch, Vendor Advisory vendor-advisory patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30052

Scores

CVSS v3 4.7
EPSS 0.0135
EPSS Percentile 68.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-693
Status published
Products (8)
Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) 15.9.0 - 15.9.63
Microsoft/Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11.0 - 16.11.37
Microsoft/Microsoft Visual Studio 2022 version 17.10 17.10.0 - 17.10.2
Microsoft/Microsoft Visual Studio 2022 version 17.4 17.4.0 - 17.4.20
Microsoft/Microsoft Visual Studio 2022 version 17.6 17.6.0 - 17.6.16
Microsoft/Microsoft Visual Studio 2022 version 17.8 17.8.0 - 17.8.11
microsoft/visual_studio_2019 15.0 - 15.9.63
microsoft/visual_studio_2022 17.4 - 17.4.20
Published Jun 11, 2024
Tracked Since Feb 18, 2026