Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Visual Studio Installer can be exploited remotely to gain privileges.
3. Use after free vulnerability in media can be exploited to cause denial of service or execute arbitrary code.
4. An elevation of privilege vulnerability in Visual Studio Code JS Debug Extension can be exploited remotely to gain privileges.

Original advisories

• CVE-2025-24039

• CVE-2025-21206
• CVE-2023-32002
• CVE-2025-24042

Related products

• Microsoft-Visual-Studio

CVE list

• CVE-2023-32002
  unknown
• CVE-2025-24039
  high
• CVE-2025-21206
  high
• CVE-2025-24042
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com