CVE-2024-49044 - Vulnerability Details

Vendors	Products
Microsoft	Visual Studio 2022

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:microsoft:visual_studio:2022:::::::*
Vendors & Products	Microsoft visual Studio

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
First Time appeared		Microsoft visual Studio 2022
CPEs		cpe:2.3:a:microsoft:visual_studio_2022::::::::
Vendors & Products		Microsoft visual Studio 2022

Type	Values Removed	Values Added
Description		Visual Studio Elevation of Privilege Vulnerability
Title		Visual Studio Elevation of Privilege Vulnerability
First Time appeared		Microsoft Microsoft visual Studio
Weaknesses		CWE-284
CPEs		cpe:2.3:a:microsoft:visual_studio:2022:::::::*
Vendors & Products		Microsoft Microsoft visual Studio
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044
Metrics		cvssV3_1 `{'score': 6.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-49044", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-10-11T20:57:49.187Z", "datePublished": "2024-11-12T17:53:55.992Z", "dateUpdated": "2025-07-08T15:41:23.957Z"}, "containers": {"cna": {"title": "Visual Studio Elevation of Privilege Vulnerability", "datePublic": "2024-11-12T08:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.6.0", "versionEndExcluding": "17.6.21"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.8.0", "versionEndExcluding": "17.8.16"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.10", "versionEndExcluding": "17.10.9"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "versionStartIncluding": "17.11", "versionEndExcluding": "17.11.6"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.6", "platforms": ["Unknown"], "versions": [{"version": "17.6.0", "lessThan": "17.6.21", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.8", "platforms": ["Unknown"], "versions": [{"version": "17.8.0", "lessThan": "17.8.16", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.10", "platforms": ["Unknown"], "versions": [{"version": "17.10", "lessThan": "17.10.9", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.11", "platforms": ["Unknown"], "versions": [{"version": "17.11", "lessThan": "17.11.6", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Visual Studio Elevation of Privilege Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-284: Improper Access Control", "lang": "en-US", "type": "CWE", "cweId": "CWE-284"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-07-08T15:41:23.957Z"}, "references": [{"name": "Visual Studio Elevation of Privilege Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 6.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-13T04:55:44.267016Z", "id": "CVE-2024-49044", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-09T17:40:36.462Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-49044 (string)

assignerOrgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

state : PUBLISHED (string)

assignerShortName : microsoft (string)

dateReserved : 2024-10-11T20:57:49.187Z (string)

datePublished : 2024-11-12T17:53:55.992Z (string)

dateUpdated : 2025-07-08T15:41:23.957Z (string)

}

containers : { »

cna : { »

title : Visual Studio Elevation of Privilege Vulnerability (string)

datePublic : 2024-11-12T08:00:00.000Z (string)

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

operator : OR (string)

negate : false (boolean)

cpeMatch : [ »

0 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.6.0 (string)

versionEndExcluding : 17.6.21 (string)

}

1 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.8.0 (string)

versionEndExcluding : 17.8.16 (string)

}

2 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.10 (string)

versionEndExcluding : 17.10.9 (string)

}

3 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 17.11 (string)

versionEndExcluding : 17.11.6 (string)

}

]

}

]

}

]

affected : [ »

0 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.6 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.6.0 (string)

lessThan : 17.6.21 (string)

versionType : custom (string)

status : affected (string)

}

]

}

1 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.8 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.8.0 (string)

lessThan : 17.8.16 (string)

versionType : custom (string)

status : affected (string)

}

]

}

2 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.10 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.10 (string)

lessThan : 17.10.9 (string)

versionType : custom (string)

status : affected (string)

}

]

}

3 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.11 (string)

platforms : [ »

0 : Unknown (string)

]

versions : [ »

0 : { »

version : 17.11 (string)

lessThan : 17.11.6 (string)

versionType : custom (string)

status : affected (string)

}

]

}

]

descriptions : [ »

0 : { »

value : Visual Studio Elevation of Privilege Vulnerability (string)

lang : en-US (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : CWE-284: Improper Access Control (string)

lang : en-US (string)

type : CWE (string)

cweId : CWE-284 (string)

}

]

}

]

providerMetadata : { »

orgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

shortName : microsoft (string)

dateUpdated : 2025-07-08T15:41:23.957Z (string)

}

references : [ »

0 : { »

name : Visual Studio Elevation of Privilege Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

]

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en-US (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseSeverity : MEDIUM (string)

baseScore : 6.7 (number)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C (string)

}

]

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-13T04:55:44.267016Z (string)

id : CVE-2024-49044 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-09T17:40:36.462Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-49044", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-13T04:55:44.267016Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-09T17:40:27.576Z"}}], "cna": {"title": "Visual Studio Elevation of Privilege Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.6", "versions": [{"status": "affected", "version": "17.6.0", "lessThan": "17.6.21", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.8", "versions": [{"status": "affected", "version": "17.8.0", "lessThan": "17.8.16", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.10", "versions": [{"status": "affected", "version": "17.10", "lessThan": "17.10.9", "versionType": "custom"}], "platforms": ["Unknown"]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.11", "versions": [{"status": "affected", "version": "17.11", "lessThan": "17.11.6", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2024-11-12T08:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044", "name": "Visual Studio Elevation of Privilege Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Visual Studio Elevation of Privilege Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.6.21", "versionStartIncluding": "17.6.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.8.16", "versionStartIncluding": "17.8.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.10.9", "versionStartIncluding": "17.10"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "17.11.6", "versionStartIncluding": "17.11"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-06-16T02:44:07.871Z"}}}, "cveMetadata": {"cveId": "CVE-2024-49044", "state": "PUBLISHED", "dateUpdated": "2025-06-16T02:44:07.871Z", "dateReserved": "2024-10-11T20:57:49.187Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2024-11-12T17:53:55.992Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-49044 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-11-13T04:55:44.267016Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-09T17:40:27.576Z (string)

}

]

cna : { »

title : Visual Studio Elevation of Privilege Vulnerability (string)

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C (string)

}

scenarios : [ »

0 : { »

lang : en-US (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.6 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.6.0 (string)

lessThan : 17.6.21 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

1 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.8 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.8.0 (string)

lessThan : 17.8.16 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

2 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.10 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.10 (string)

lessThan : 17.10.9 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

3 : { »

vendor : Microsoft (string)

product : Microsoft Visual Studio 2022 version 17.11 (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.11 (string)

lessThan : 17.11.6 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : Unknown (string)

]

}

]

datePublic : 2024-11-12T08:00:00.000Z (string)

references : [ »

0 : { »

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044 (string)

name : Visual Studio Elevation of Privilege Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en-US (string)

value : Visual Studio Elevation of Privilege Vulnerability (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en-US (string)

type : CWE (string)

cweId : CWE-284 (string)

description : CWE-284: Improper Access Control (string)

}

]

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

negate : false (boolean)

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.6.21 (string)

versionStartIncluding : 17.6.0 (string)

}

1 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.8.16 (string)

versionStartIncluding : 17.8.0 (string)

}

2 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.10.9 (string)

versionStartIncluding : 17.10 (string)

}

3 : { »

criteria : cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 17.11.6 (string)

versionStartIncluding : 17.11 (string)

}

]

operator : OR (string)

}

]

}

]

providerMetadata : { »

orgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

shortName : microsoft (string)

dateUpdated : 2025-06-16T02:44:07.871Z (string)

}

cveMetadata : { »

cveId : CVE-2024-49044 (string)

state : PUBLISHED (string)

dateUpdated : 2025-06-16T02:44:07.871Z (string)

dateReserved : 2024-10-11T20:57:49.187Z (string)

assignerOrgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

datePublished : 2024-11-12T17:53:55.992Z (string)

assignerShortName : microsoft (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "8DEC4BF6-8208-444A-A1EE-B357DE764DDE", "versionEndExcluding": "17.6.21", "versionStartIncluding": "17.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "5B5EFF64-49AE-4F5B-A959-F0C56AAE313C", "versionEndExcluding": "17.8.16", "versionStartIncluding": "17.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "B85CEE4B-546D-4DBF-8673-96859149F05F", "versionEndExcluding": "17.10.9", "versionStartIncluding": "17.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "0FCE50CB-B8BC-4C62-86AC-4B5DC0F0A8BA", "versionEndExcluding": "17.11.6", "versionStartIncluding": "17.11.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Visual Studio Elevation of Privilege Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de elevaci\u00f3n de privilegios en Visual Studio"}], "id": "CVE-2024-49044", "lastModified": "2024-11-16T00:03:54.977", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.5, "source": "secure@microsoft.com", "type": "Primary"}]}, "published": "2024-11-12T18:15:44.867", "references": [{"source": "secure@microsoft.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "secure@microsoft.com", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8DEC4BF6-8208-444A-A1EE-B357DE764DDE (string)

versionEndExcluding : 17.6.21 (string)

versionStartIncluding : 17.6.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5B5EFF64-49AE-4F5B-A959-F0C56AAE313C (string)

versionEndExcluding : 17.8.16 (string)

versionStartIncluding : 17.8.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B85CEE4B-546D-4DBF-8673-96859149F05F (string)

versionEndExcluding : 17.10.9 (string)

versionStartIncluding : 17.10.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0FCE50CB-B8BC-4C62-86AC-4B5DC0F0A8BA (string)

versionEndExcluding : 17.11.6 (string)

versionStartIncluding : 17.11.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Visual Studio Elevation of Privilege Vulnerability (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad de elevación de privilegios en Visual Studio (string)

}

]

id : CVE-2024-49044 (string)

lastModified : 2024-11-16T00:03:54.977 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.5 (number)

source : secure@microsoft.com (string)

type : Primary (string)

}

]

}

published : 2024-11-12T18:15:44.867 (string)

references : [ »

0 : { »

source : secure@microsoft.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044 (string)

}

]

sourceIdentifier : secure@microsoft.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : secure@microsoft.com (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object