HIGH
Visual Studio Elevation of Privilege Vulnerability
Published Jan 9, 2024
7.8
HIGHCVSS 3.1
EPSS 3.95%
Description
Visual Studio Elevation of Privilege Vulnerability
Affected products
-
- Version 14.0.0StatusaffectedConstraints<14.0.27560.00
- Version
- Vendor Microsoft Product Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Defaultn/a
- Version 15.9.0StatusaffectedConstraints<15.9.59
- Version
- Vendor Microsoft Product Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Defaultn/a
- Version 16.11.0StatusaffectedConstraints<16.11.33
- Version
-
- Version 17.2.0StatusaffectedConstraints<17.2.23
- Version
-
- Version 17.4.0StatusaffectedConstraints<17.4.15
- Version
-
- Version 17.6.0StatusaffectedConstraints<17.6.11
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft Visual Studio 2015 Update 3 | n/a |
| ||||||
| Microsoft | Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) | n/a |
| ||||||
| Microsoft | Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) | n/a |
| ||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.2 | n/a |
| ||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.4 | n/a |
| ||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.6 | n/a |
|
OR
- 2015
- ≥ 15.0 · < 15.9.59
- ≥ 16.0 · < 16.11.33
- ≥ 17.2 · < 17.2.23
- ≥ 17.4 · < 17.4.15
- ≥ 17.6 · < 17.6.11
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-18371 Advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20656 vendor-advisoryPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-18371 | Advisory | |
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20656 | vendor-advisoryPatchVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner microsoft
Published Jan 9, 2024
Updated May 3, 2025
Reserved Nov 28, 2023
Link CVE-2024-20656
CISA Vulnrichment
Updated Jan 30, 2024
ENISA EUVD
EUVD-2024-18371 Assigner microsoft
Published Jan 9, 2024
Updated May 3, 2025
Exploited since n/a
Link EUVD-2024-18371