CVE-2025-21405

HIGH

Visual Studio 2022 17.12.0-17.12.4 - Elevation of Privilege

Title source: llm

Visual Studio Elevation of Privilege Vulnerability

Core 1

Core References

Patch, Vendor Advisory vendor-advisory patch

CVSS v3 7.3

EPSS 0.0042

EPSS Percentile 62.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-284

Status published

Products (1)

microsoft/visual_studio_2022 17.12.0 - 17.12.4

Published Jan 14, 2025

Tracked Since Feb 18, 2026