CVE-2024-30052
MediumCVSS 4.7Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the context of the logged-in user. Exploitation requires user interaction, such as opening a specially crafted project file.
Risk Assessment
An attacker could take over a developer workstation, steal source code, or install malware. The risk is especially high in environments where developers work with untrusted repositories.
Recommendation
Apply the Visual Studio security update published by Microsoft immediately. Restrict opening projects from unknown sources and educate the team about phishing threats.
Other vulnerabilities in Visual Studio
See all- CVE-2021-36952High
Visual Studio Remote Code Execution Vulnerability. Details not available in the description.
- CVE-2026-77907High
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- CVE-2026-77906High
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- CVE-2026-71328High
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- CVE-2026-69522High
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- CVE-2026-47305High
A protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. The vulnerability can be exploited through local access to the system.
- CVE-2024-29060Medium
Elevation of privilege vulnerability in Visual Studio. An attacker could exploit this flaw to gain elevated privileges on the system.
- CVE-2023-33139Medium
A vulnerability in Visual Studio allows for information disclosure, potentially leading to unauthorized access to sensitive data.
- CVE-2023-23381High
Visual Studio contains a Remote Code Execution Vulnerability that could allow an attacker to execute arbitrary code in the context of the logged-in user.
- CVE-2023-21815High
Remote code execution vulnerability in Visual Studio. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Original NVD description (English source)
Visual Studio Remote Code Execution Vulnerability