CVE-2025-32703CWE-1220CWE-200

Visual Studio Information Disclosure Vulnerability

Medium · published May 13, 2025

CVSS v3.1
5.5
EPSS
1%
Percentile
41.9
In the wild
Unconfirmed
What it is

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00500 · 41.9th percentile
Weaknesses
CWE-1220 · Insufficient Granularity of Access Control; CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-05-13T16:58Z
EPSS history
Timeline
  • 13 MAY 16:58Z
    Visual Studio Information Disclosure Vulnerability
    cvelistv5