CVE-2024-30052

A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the context of the logged-in user. Exploitation requires user interaction, such as opening a specially crafted project file.

An attacker could take over a developer workstation, steal source code, or install malware. The risk is especially high in environments where developers work with untrusted repositories.

Apply the Visual Studio security update published by Microsoft immediately. Restrict opening projects from unknown sources and educate the team about phishing threats.