Vulnerabilities > CVE-2025-32703 - Insufficient Granularity of Access Control vulnerability in Microsoft Visual Studio 2019

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
microsoft
CWE-1220
NVD
Published: 2025-05-13
Updated: 2025-05-19

Summary

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

Vulnerable Configurations

Part Description Count
Application
Microsoft
345

Common Weakness Enumeration (CWE)

References