Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products7

• Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
• Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
• Microsoft Visual Studio 2022 version 17.10
• Microsoft Visual Studio 2022 version 17.11
• Microsoft Visual Studio 2022 version 17.6
• Microsoft Visual Studio 2022 version 17.8
• Visual C++ Redistributable Installer

✅ Remediation

KBRelease Notes (Security Update) — fixed build 14.40.33816 KBRelease Notes (Security Update) — fixed build 15.9.67 KBRelease Notes (Security Update) — fixed build 16.11.41 KBRelease Notes (Security Update) — fixed build 17.6.20 KBRelease Notes (Security Update) — fixed build 17.8.15 KBRelease Notes (Security Update) — fixed build 17.10.8 KBRelease Notes (Security Update) — fixed build 17.11.5

🔗 References (11)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590
• patchhttps://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170
• patchhttp://aka.ms/vs/15/release/latest
• referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11
• referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.10
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.11