CVE-2025-21206
Published: 11 February 2025
Description
Visual Studio Installer Elevation of Privilege Vulnerability
Security Summary
CVE-2025-21206 is an Elevation of Privilege vulnerability in the Visual Studio Installer. Published on 2025-02-11T18:15:31.610, it carries a CVSS v3.1 base score of 7.3 (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) and is linked to CWE-427 (Untrusted Search Path) as well as NVD-CWE-noinfo.
The vulnerability can be exploited by a local attacker possessing low privileges, requiring low attack complexity and user interaction. Successful exploitation enables privilege escalation, resulting in high impacts to confidentiality, integrity, and availability.
Microsoft provides details on the vulnerability, including mitigation and patch information, in their Security Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21206.
Details
- CWE(s)