CVE-2025-29803

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.3 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:sql_server_management_studio::::::::
	cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019::::::::
	cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019_sdk::::::::
	cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022::::::::
	cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022_sdk::::::::

History

No history.

Information

Published : 2025-04-12 02:15

Updated : 2025-07-10 14:53

NVD link : CVE-2025-29803

Mitre link : CVE-2025-29803

CVE.ORG link : CVE-2025-29803

JSON object : View

Products Affected

microsoft

visual_studio_tools_for_applications_2022
sql_server_management_studio
visual_studio_tools_for_applications_2022_sdk
visual_studio_tools_for_applications_2019
visual_studio_tools_for_applications_2019_sdk

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2025-29803", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.3}]}, "published": "2025-04-12T02:15:20.990", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally."}, {"lang": "es", "value": "El elemento de ruta de b\u00fasqueda no controlada en Visual Studio Tools para aplicaciones y SQL Server Management Studio permite que un atacante autorizado eleve privilegios localmente."}], "lastModified": "2025-07-10T14:53:39.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:sql_server_management_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF50317D-F7E0-4BCC-84BF-645399974161", "versionEndExcluding": "20.2.1"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07ACE84A-7FB6-4249-A719-B3BBDAE1DC5C", "versionEndExcluding": "16.0.35907.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019_sdk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84EB3E11-1C6A-4E17-BB33-E76E97A9614A", "versionEndExcluding": "16.0.35907.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44D4D3DB-FC7E-453C-8E71-178FBBAEE585", "versionEndExcluding": "17.0.35906.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022_sdk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEEED2A3-8BBA-434E-9A9E-F163725CE36D", "versionEndExcluding": "17.0.35906.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}