CVE-2024-43590 - Vulnerability Details

Vendors	Products
Microsoft	Visual Studio 2017 Visual Studio 2019 Visual Studio 2022

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:microsoft:visual_c_plus_plus_redistributable_installer:::::::: cpe:2.3:a:microsoft:visual_studio:2022:::::::*
Vendors & Products	Microsoft visual C Plus Plus Redistributable Installer Microsoft visual Studio

Type	Values Removed	Values Added
First Time appeared		Microsoft visual Studio 2022
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:a:microsoft:visual_studio_2022::::::::
Vendors & Products		Microsoft visual Studio 2022

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
Title		Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
First Time appeared		Microsoft Microsoft visual C Plus Plus Redistributable Installer Microsoft visual Studio Microsoft visual Studio 2017 Microsoft visual Studio 2019
Weaknesses		CWE-284
CPEs		cpe:2.3:a:microsoft:visual_c_plus_plus_redistributable_installer:::::::: cpe:2.3:a:microsoft:visual_studio:2022:::::::* cpe:2.3:a:microsoft:visual_studio_2017:::::::: cpe:2.3:a:microsoft:visual_studio_2019::::::::
Vendors & Products		Microsoft Microsoft visual C Plus Plus Redistributable Installer Microsoft visual Studio Microsoft visual Studio 2017 Microsoft visual Studio 2019
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-43590", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-08-14T01:08:33.548Z", "datePublished": "2024-10-08T17:36:14.169Z", "dateUpdated": "2025-01-29T23:50:59.023Z"}, "containers": {"cna": {"title": "Visual C++ Redistributable Installer Elevation of Privilege Vulnerability", "datePublic": "2024-10-08T07:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_c_plus_plus_redistributable_installer:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.0", "versionEndExcluding": "14.40.33816"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*", "versionStartIncluding": "15.9.0", "versionEndExcluding": "15.9.67"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "versionStartIncluding": "16.11.0", "versionEndExcluding": "16.11.41"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.6.0", "versionEndExcluding": "17.6.20"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.8.0", "versionEndExcluding": "17.8.15"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.10", "versionEndExcluding": "17.10.8"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.11", "versionEndExcluding": "17.11.5"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Visual C++ Redistributable Installer", "platforms": ["Unknown"], "versions": [{"version": "10.0.0", "lessThan": "14.40.33816", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)", "platforms": ["Unknown"], "versions": [{"version": "15.9.0", "lessThan": "15.9.67", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)", "platforms": ["Unknown"], "versions": [{"version": "16.11.0", "lessThan": "16.11.41", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.6", "platforms": ["Unknown"], "versions": [{"version": "17.6.0", "lessThan": "17.6.20", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.8", "platforms": ["Unknown"], "versions": [{"version": "17.8.0", "lessThan": "17.8.15", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.10", "platforms": ["Unknown"], "versions": [{"version": "17.10", "lessThan": "17.10.8", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.11", "platforms": ["Unknown"], "versions": [{"version": "17.11", "lessThan": "17.11.5", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Visual C++ Redistributable Installer Elevation of Privilege Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-284: Improper Access Control", "lang": "en-US", "type": "CWE", "cweId": "CWE-284"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-01-29T23:50:59.023Z"}, "references": [{"name": "Visual C++ Redistributable Installer Elevation of Privilege Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-08T18:34:14.182011Z", "id": "CVE-2024-43590", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-08T18:34:32.825Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-43590 (string)

assignerOrgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

state : PUBLISHED (string)

assignerShortName : microsoft (string)

dateReserved : 2024-08-14T01:08:33.548Z (string)

datePublished : 2024-10-08T17:36:14.169Z (string)

dateUpdated : 2025-01-29T23:50:59.023Z (string)

}

containers : { »

cna : { »

title : Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (string)

datePublic : 2024-10-08T07:00:00.000Z (string)

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

operator : OR (string)

negate : false (boolean)

cpeMatch : [ »

0 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_c_plus_plus_redistributable_installer:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 10.0.0 (string)

versionEndExcluding : 14.40.33816 (string)

}

1 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 15.9.0 (string)

versionEndExcluding : 15.9.67 (string)

}

2 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 16.11.0 (string)

versionEndExcluding : 16.11.41 (string)

}

3 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.6.0 (string)

versionEndExcluding : 17.6.20 (string)

}

4 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.8.0 (string)

versionEndExcluding : 17.8.15 (string)

}

5 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.10 (string)

versionEndExcluding : 17.10.8 (string)

}

6 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.11 (string)

versionEndExcluding : 17.11.5 (string)

}

]

}

]

}

]

affected : [ »

0 : { »

vendor : Microsoft (string)

product : Visual C++ Redistributable Installer (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 10.0.0 (string)

lessThan : 14.40.33816 (string)

versionType : custom (string)

status : affected (string)

}

]

}

1 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 15.9.0 (string)

lessThan : 15.9.67 (string)

versionType : custom (string)

status : affected (string)

}

]

}

2 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 16.11.0 (string)

lessThan : 16.11.41 (string)

versionType : custom (string)

status : affected (string)

}

]

}

3 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.6 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.6.0 (string)

lessThan : 17.6.20 (string)

versionType : custom (string)

status : affected (string)

}

]

}

4 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.8 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.8.0 (string)

lessThan : 17.8.15 (string)

versionType : custom (string)

status : affected (string)

}

]

}

5 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.10 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.10 (string)

lessThan : 17.10.8 (string)

versionType : custom (string)

status : affected (string)

}

]

}

6 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.11 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.11 (string)

lessThan : 17.11.5 (string)

versionType : custom (string)

status : affected (string)

}

]

}

]

descriptions : [ »

0 : { »

value : Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (string)

lang : en-US (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : CWE-284: Improper Access Control (string)

lang : en-US (string)

type : CWE (string)

cweId : CWE-284 (string)

}

]

}

]

providerMetadata : { »

orgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

shortName : microsoft (string)

dateUpdated : 2025-01-29T23:50:59.023Z (string)

}

references : [ »

0 : { »

name : Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

]

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en-US (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseSeverity : HIGH (string)

baseScore : 7.8 (number)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C (string)

}

]

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-08T18:34:14.182011Z (string)

id : CVE-2024-43590 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-08T18:34:32.825Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-43590", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-08T18:34:14.182011Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-08T18:34:27.284Z"}}], "cna": {"title": "Visual C++ Redistributable Installer Elevation of Privilege Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Visual C++ Redistributable Installer", "versions": [{"status": "affected", "version": "10.0.0", "lessThan": "14.40.33816", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)", "versions": [{"status": "affected", "version": "15.9.0", "lessThan": "15.9.67", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)", "versions": [{"status": "affected", "version": "16.11.0", "lessThan": "16.11.41", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.6", "versions": [{"status": "affected", "version": "17.6.0", "lessThan": "17.6.20", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.8", "versions": [{"status": "affected", "version": "17.8.0", "lessThan": "17.8.15", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.10", "versions": [{"status": "affected", "version": "17.10", "lessThan": "17.10.8", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.11", "versions": [{"status": "affected", "version": "17.11", "lessThan": "17.11.5", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2024-10-08T07:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590", "name": "Visual C++ Redistributable Installer Elevation of Privilege Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Visual C++ Redistributable Installer Elevation of Privilege Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_c_plus_plus_redistributable_installer:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "14.40.33816", "versionStartIncluding": "10.0.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "15.9.67", "versionStartIncluding": "15.9.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "16.11.41", "versionStartIncluding": "16.11.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.6.20", "versionStartIncluding": "17.6.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.8.15", "versionStartIncluding": "17.8.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.10.8", "versionStartIncluding": "17.10"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.11.5", "versionStartIncluding": "17.11"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-01-29T23:50:59.023Z"}}}, "cveMetadata": {"cveId": "CVE-2024-43590", "state": "PUBLISHED", "dateUpdated": "2025-01-29T23:50:59.023Z", "dateReserved": "2024-08-14T01:08:33.548Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2024-10-08T17:36:14.169Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-43590 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-08T18:34:14.182011Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-08T18:34:27.284Z (string)

}

]

cna : { »

title : Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (string)

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C (string)

}

scenarios : [ »

0 : { »

lang : en-US (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Microsoft (string)

product : Visual C++ Redistributable Installer (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.0.0 (string)

lessThan : 14.40.33816 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

1 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) (string)

versions : [ »

0 : { »

status : affected (string)

version : 15.9.0 (string)

lessThan : 15.9.67 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

2 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) (string)

versions : [ »

0 : { »

status : affected (string)

version : 16.11.0 (string)

lessThan : 16.11.41 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

3 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.6 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.6.0 (string)

lessThan : 17.6.20 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

4 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.8 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.8.0 (string)

lessThan : 17.8.15 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

5 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.10 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.10 (string)

lessThan : 17.10.8 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

6 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.11 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.11 (string)

lessThan : 17.11.5 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

]

datePublic : 2024-10-08T07:00:00.000Z (string)

references : [ »

0 : { »

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590 (string)

name : Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en-US (string)

value : Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en-US (string)

type : CWE (string)

cweId : CWE-284 (string)

description : CWE-284: Improper Access Control (string)

}

]

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

negate : false (boolean)

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:microsoft:visual_c_plus_plus_redistributable_installer:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 14.40.33816 (string)

versionStartIncluding : 10.0.0 (string)

}

1 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 15.9.67 (string)

versionStartIncluding : 15.9.0 (string)

}

2 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 16.11.41 (string)

versionStartIncluding : 16.11.0 (string)

}

3 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.6.20 (string)

versionStartIncluding : 17.6.0 (string)

}

4 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.8.15 (string)

versionStartIncluding : 17.8.0 (string)

}

5 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.10.8 (string)

versionStartIncluding : 17.10 (string)

}

6 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.11.5 (string)

versionStartIncluding : 17.11 (string)

}

]

operator : OR (string)

}

]

}

]

providerMetadata : { »

orgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

shortName : microsoft (string)

dateUpdated : 2025-01-29T23:50:59.023Z (string)

}

cveMetadata : { »

cveId : CVE-2024-43590 (string)

state : PUBLISHED (string)

dateUpdated : 2025-01-29T23:50:59.023Z (string)

dateReserved : 2024-08-14T01:08:33.548Z (string)

assignerOrgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

datePublished : 2024-10-08T17:36:14.169Z (string)

assignerShortName : microsoft (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*", "matchCriteriaId": "00680F8D-9858-4706-8888-4130E4CDA76B", "versionEndExcluding": "15.9.67", "versionStartIncluding": "15.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "matchCriteriaId": "1915924B-3EB6-4EF4-9DC8-31A98C858ADD", "versionEndExcluding": "15.9.67", "versionStartIncluding": "15.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*", "matchCriteriaId": "111ACA28-0E8E-4F6D-BE67-F2E0703BC33F", "versionEndExcluding": "16.11.41", "versionStartIncluding": "16.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "18D2A92E-FB5F-4892-A7EF-0DBD26281248", "versionEndExcluding": "17.6.20", "versionStartIncluding": "17.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "34609790-24EF-448C-8AED-9BF831D73629", "versionEndExcluding": "17.8.15", "versionStartIncluding": "17.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "480AA116-1C38-4778-A84D-321278AEC747", "versionEndExcluding": "17.10.8", "versionStartIncluding": "17.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD8D6C06-D7AB-4E82-AAD6-4240603B6AC6", "versionEndExcluding": "17.11.5", "versionStartIncluding": "17.11.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Visual C++ Redistributable Installer Elevation of Privilege Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de elevaci\u00f3n de privilegios en el instalador redistribuible de Visual C++"}], "id": "CVE-2024-43590", "lastModified": "2024-10-16T21:44:50.927", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "secure@microsoft.com", "type": "Primary"}]}, "published": "2024-10-08T18:15:26.913", "references": [{"source": "secure@microsoft.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-284"}], "source": "secure@microsoft.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 00680F8D-9858-4706-8888-4130E4CDA76B (string)

versionEndExcluding : 15.9.67 (string)

versionStartIncluding : 15.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1915924B-3EB6-4EF4-9DC8-31A98C858ADD (string)

versionEndExcluding : 15.9.67 (string)

versionStartIncluding : 15.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 111ACA28-0E8E-4F6D-BE67-F2E0703BC33F (string)

versionEndExcluding : 16.11.41 (string)

versionStartIncluding : 16.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 18D2A92E-FB5F-4892-A7EF-0DBD26281248 (string)

versionEndExcluding : 17.6.20 (string)

versionStartIncluding : 17.6.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 34609790-24EF-448C-8AED-9BF831D73629 (string)

versionEndExcluding : 17.8.15 (string)

versionStartIncluding : 17.8.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 480AA116-1C38-4778-A84D-321278AEC747 (string)

versionEndExcluding : 17.10.8 (string)

versionStartIncluding : 17.10.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : AD8D6C06-D7AB-4E82-AAD6-4240603B6AC6 (string)

versionEndExcluding : 17.11.5 (string)

versionStartIncluding : 17.11.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad de elevación de privilegios en el instalador redistribuible de Visual C++ (string)

}

]

id : CVE-2024-43590 (string)

lastModified : 2024-10-16T21:44:50.927 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : secure@microsoft.com (string)

type : Primary (string)

}

]

}

published : 2024-10-08T18:15:26.913 (string)

references : [ »

0 : { »

source : secure@microsoft.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590 (string)

}

]

sourceIdentifier : secure@microsoft.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : secure@microsoft.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object