Unrated severityNVD Advisory· Published Apr 12, 2025· Updated Feb 13, 2026

Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

CVE-2025-29803

Description

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.

Affected products

Microsoft/SQL Server Management Studio Expresscpe-rescue
Range: 20.0
Microsoft/Visual Studio Tools for Applications (VSTA)v5
Range: 17.0
Microsoft/VSTA 2019 SDKv5
Range: 16.0
Microsoft/VSTA 2022 SDKv5
Range: 17.0

Patches

Vulnerability mechanics

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803mitrevendor-advisorypatch

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000