Microsoft Visual Studio Elevation of Privilege Vulnerability

A vulnerability allowing elevation of privilege has been identified in Microsoft Visual Studio. This issue arises from an uncontrolled search path element, which can be exploited by an authorized attacker to gain higher privileges locally. The vulnerability affects several versions of Visual Studio 2022, as well as Visual Studio 2019 version 16.11.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to elevate privileges, gaining the rights of the user running the affected application.

Remediation

Users can apply the security update available through the Microsoft Visual Studio 2022 and 2019 update channels. Instructions for downloading the update are available on the Microsoft Visual Studio website.