Microsoft Visual Studio Improper Link Resolution Vulnerability Allowing Privilege Escalation

A vulnerability exists in Microsoft Visual Studio due to improper link resolution before file access, commonly referred to as 'link following'. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability affects multiple versions of Visual Studio, including 2022 (various releases), 2019 version 16.11, 2017 version 15.9, and Visual Studio 2015 Update 3.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update available through the Microsoft Visual Studio Update mechanism. Specific update details can be found in the Visual Studio 2022 release notes, the Visual Studio 2019 version 16.11 update page, and the Visual Studio 2017 version 15.9 update page.