CVE-2025-32703: Visual Studio Information Disclosure Vulnerability
Published May 13, 2025
·Updated
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
Other sources
Visual Studio Information Disclosure Vulnerability
— Microsoft
Affected Software
11 affected componentsFixes available
Microsoft Visual Studio 2022=17.12
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft Visual Studio 2022=17.10
Microsoft Visual Studio 2022=17.8
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Microsoft Visual Studio 2017>=15.0<15.9.73
Microsoft Visual Studio 2019>=16.0<16.11.47
Microsoft Visual Studio 2022>=17.8.0<17.8.21
Microsoft Visual Studio 2022>=17.10.0<17.10.14
Microsoft Visual Studio 2022>=17.12.0<17.12.8
Microsoft Visual Studio 2022>=17.13.0<17.13.7
Event History
May 13, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·04:58 PM
Data Sourced
via MITRE·04:58 PM
DescriptionSeverity
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-32703?
CVE-2025-32703 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2025-32703?
To mitigate CVE-2025-32703, update to the latest patch of Visual Studio version 17.12, 16.11, 17.10, or 17.8.
3
Who is affected by CVE-2025-32703?
CVE-2025-32703 affects users of Visual Studio 2022 versions 17.12, 17.10, 17.8, and Visual Studio 2019 version 16.11.
4
What type of attack does CVE-2025-32703 allow?
CVE-2025-32703 allows an authorized attacker to disclose information locally due to insufficient access control.
5
Is there a known workaround for CVE-2025-32703?
Currently, the recommended approach for CVE-2025-32703 is to apply the relevant security patches as no specific workarounds are provided.