CVE-2025-29803
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SQL Server Management Studio 20.2
- Vendor
- Microsoft
- Product
- SQL Server Management Studio 20.2
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 20.0 | affected | custom | 20.2.37.0 | Unavailable | None listed |
Visual Studio Tools for Applications (VSTA)
- Vendor
- Microsoft
- Product
- Visual Studio Tools for Applications (VSTA)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 16.0 | affected | custom | 16.0.35907.0 | Unavailable | None listed |
Visual Studio Tools for Applications (VSTA)
- Vendor
- Microsoft
- Product
- Visual Studio Tools for Applications (VSTA)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 17.0 | affected | custom | 17.0.35906.0 | Unavailable | None listed |
VSTA 2019 SDK
- Vendor
- Microsoft
- Product
- VSTA 2019 SDK
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 16.0 | affected | custom | 16.0.35907.0 | Unavailable | None listed |
VSTA 2022 SDK
- Vendor
- Microsoft
- Product
- VSTA 2022 SDK
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 17.0 | affected | custom | 17.0.35906.0 | Unavailable | None listed |