Visual Studio Elevation of Privilege Vulnerability

The Microsoft Visual Studio Products installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - A potential privilege escalation vulnerability. An attacker can exploit this to elevate their privileges.     (CVE-2022-24513)

  - A potetnial Denial Of Service vulnerability. An attacker can exploit this to create a denial of service.     (CVE-2022-23267)

  - An information disclosure vulnerability. An attacker canm exploit this to disclose potentially sensitive     information. (CVE-2022-30184)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513)

  - An information disclosure vulnerability exists in Visual Studio. An unauthenticated, remote attacker can exploit     this to disclose potentially sensitive information. (CVE-2022-30184)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513)

  - A remote code execution vulnerability. (CVE-2022-29148)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513)

  - Multiple denial of service (DoS) vulnerabilities. An unauthenticated, remote attacker can exploit this to     cause a DoS condition. (CVE-2022-29117, CVE-2022-23267, CVE-2022-29145)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities including the following:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513)

  - A buffer overflow vulnerability. An attacker can exploit this to trigger crash in the system.     (CVE-2020-8927)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513, CVE-2022-24765, CVE-2021-43877)

  - A DLL hijacking vulnerability. An authenticated attacker can exploit this to execute arbitrary code.     (CVE-2022-24767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
162392	Security Updates for Visual Studio 2019/2022 (June 2022) (macOS)	Nessus	Windows : Microsoft Bulletins	medium
162317	Security Updates for Microsoft Visual Studio Products (June 2022)	Nessus	Windows : Microsoft Bulletins	medium
161119	Security Updates for Microsoft Visual Studio Products (May 2022)	Nessus	Windows : Microsoft Bulletins	high
161118	Security Updates for Microsoft Visual Studio Products (May 2022)	Nessus	Windows : Microsoft Bulletins	high
159887	Security Update for Visual Studio 2019 (April 2022) (macOS)	Nessus	MacOS X Local Security Checks	medium
159733	Security Updates for Microsoft Visual Studio Products (April 2022)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2022-24513

high

Tenable Plugins

medium

medium

high

high

medium

high