.NET and Visual Studio Elevation of Privilege Vulnerability
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.1epss 1.9%
exploitation probability
1.9%top 23% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in .NET and Visual Studio allows a local user to gain higher privileges on the system. An attacker who can run code on your computer could use this vulnerability to take control of it with administrator rights.
Technical detail
This elevation of privilege vulnerability in .NET and Visual Studio (CWE-1220) allows a local attacker to escalate privileges from a lower-privileged context to a higher-privileged one. The attack requires local code execution capability; exploitation results in unauthorized administrative access to the affected system.
Summary generated and translated by AI from the official description.
.NET and Visual Studio Elevation of Privilege Vulnerability
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected products
Microsoft · Microsoft Visual Studio 2022 version 17.0Microsoft · Microsoft Visual Studio 2022 version 17.2Microsoft · Microsoft Visual Studio 2022 version 17.4Microsoft · Microsoft Visual Studio 2022 version 17.6Microsoft · .NET 6.0Microsoft · .NET 7.0Microsoft · PowerShell 7.2Microsoft · PowerShell 7.3