Microsoft Visual C++ Redistributable Installer Elevation of Privilege
CVE-2024-43590 Published on October 8, 2024

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Vendor Advisory NVD

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2024-43590 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2024-43590

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

 
 
 

Affected Versions

Microsoft Visual C++ Redistributable Installer: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8): Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10): Microsoft Visual Studio 2022 version 17.6: Microsoft Visual Studio 2022 version 17.8: Microsoft Visual Studio 2022 version 17.10: Microsoft Visual Studio 2022 version 17.11:

Exploit Probability

EPSS
0.60%
Percentile
69.11%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.