CVE-2025-55240: Visual Studio Elevation of Privilege Vulnerability
Published Oct 14, 2025
·Updated
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
Other sources
Visual Studio Elevation of Privilege Vulnerability
— Microsoft
Affected Software
9 affected componentsFixes available
Microsoft Visual Studio 2022=17.10
Microsoft Visual Studio 2017 (includes 15.0 - 15.8)=15.9
Microsoft Visual Studio 2022=17.12
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft Visual Studio 2017>=15.0<15.9.77
Microsoft Visual Studio 2019>=16.0<16.11.52
Microsoft Visual Studio 2022>=17.10.0<17.10.20
Microsoft Visual Studio 2022>=17.12.0<17.12.13
Microsoft Visual Studio 2022>=17.14.0<17.14.17
Event History
Oct 14, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55240?
CVE-2025-55240 is classified as a medium severity elevation of privilege vulnerability.
2
How do I fix CVE-2025-55240?
To fix CVE-2025-55240, apply the latest patches for Visual Studio 2017, 2019, or 2022 as recommended by Microsoft.
3
Who is affected by CVE-2025-55240?
CVE-2025-55240 affects authorized users of Visual Studio 2017, 2019, and 2022 who may exploit the vulnerability to elevate privileges.
4
What products are impacted by CVE-2025-55240?
CVE-2025-55240 impacts Microsoft Visual Studio versions 15.9, 16.11, 17.10, and 17.12.
5
What does CVE-2025-55240 allow an attacker to do?
CVE-2025-55240 allows an authorized attacker to elevate their privileges locally within the Visual Studio application.