CVE-2022-24513: Visual Studio Elevation of Privilege Vulnerability

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-15 · updated 2026-10-23

Description

Visual Studio Elevation of Privilege Vulnerability

Affected products

Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8): from 15.9 before 15.9.49 — fixed in 15.9.49
Microsoft Visual Studio 2019: from 8.10 before 8.10.24; from 16.7 before 16.7.27; from 16.9 before 16.9.23; from 16.11 before 16.11.16 — fixed in 16.11.16, 16.7.27, 16.9.23, 8.10.24
Microsoft Visual Studio 2022 version 17.14: from 17.0 before 17.0.3; from 17.0 before 17.0.12; from 17.1 before 17.1.7 — fixed in 17.0.12, 17.0.3, 17.1.7
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10): from 16.11.0 before 16.11.16 — fixed in 16.11.16
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6): from 16.0.0 before 16.7.27 — fixed in 16.7.27
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8): from 15.0.0 before 16.9.23 — fixed in 16.9.23
Microsoft Visual Studio 2022 version 17.0: from 17.0.0 before 17.0.12 — fixed in 17.0.12
Microsoft Visual Studio 2022 version 17.1: from 17.0.0 before 17.1.7 — fixed in 17.1.7
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8): from 15.9.0 before 15.9.49 — fixed in 15.9.49
Microsoft Visual Studio 2019 for Mac version 8.10: from 8.1.0 before 8.10.24 — fixed in 8.10.24
Microsoft Visual Studio 2022 for Mac version 17.0: from 17.0.0 before 17.0.3 — fixed in 17.0.3

How to fix

Upgrade to a fixed version: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) 15.9.49; Microsoft Visual Studio 2019 16.11.16, 16.7.27, 16.9.23, 8.10.24; Microsoft Visual Studio 2022 version 17.14 17.0.12, 17.0.3, 17.1.7; Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11.16; Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) 16.7.27; Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) 16.9.23; Microsoft Visual Studio 2022 version 17.0 17.0.12; Microsoft Visual Studio 2022 version 17.1 17.1.7; Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) 15.9.49; Microsoft Visual Studio 2019 for Mac version 8.10 8.10.24; Microsoft Visual Studio 2022 for Mac version 17.0 17.0.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-24513 or the next vulnerability affects your stack