CVE-2025-32703

Visual Studio Information Disclosure Vulnerability

CVSS 5.5 MEDIUMEPSS 0.4%CWE-1220 CWE-200

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Produtos afetados

Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)Microsoft · Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)Microsoft · Microsoft Visual Studio 2022 version 17.10 Microsoft · Microsoft Visual Studio 2022 version 17.12 Microsoft · Microsoft Visual Studio 2022 version 17.13 Microsoft · Microsoft Visual Studio 2022 version 17.8

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32703