CVE-2025-21206: Visual Studio Installer Elevation of Privilege Vulnerability
Published Feb 11, 2025
·Updated
Visual Studio Installer Elevation of Privilege Vulnerability
Affected Software
10 affected componentsFixes available
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Microsoft Visual Studio 2017>=15.0<15.9.70
Microsoft Visual Studio 2019>=16.0<16.11.44
Microsoft Visual Studio 2022>=17.8<17.8.18
Microsoft Visual Studio 2022>=17.10<17.10.11
Microsoft Visual Studio 2022>=17.12<17.12.5
Microsoft Visual Studio 2022=17.10
Microsoft Visual Studio 2022=17.8
Microsoft Visual Studio 2022=17.12
Remediation
Event History
Feb 11, 2025
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:58 PM
Data Sourced
via MITRE·05:58 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21206?
CVE-2025-21206 is classified as an Elevation of Privilege vulnerability.
2
How do I fix CVE-2025-21206?
To remediate CVE-2025-21206, apply the latest updates for Visual Studio 2022, 2019, or 2017 as appropriate.
3
Which versions of Visual Studio are affected by CVE-2025-21206?
CVE-2025-21206 affects Visual Studio 2022 version 17.8, 17.10, and 17.12, as well as Visual Studio 2019 version 16.11 and Visual Studio 2017 version 15.9.
4
What products are impacted by CVE-2025-21206?
CVE-2025-21206 impacts Microsoft Visual Studio 2022, Visual Studio 2019, and Visual Studio 2017.
5
Is there a workaround for CVE-2025-21206?
There are no official workarounds for CVE-2025-21206; updating to the patched versions is recommended.