Feb 2025: Visual Studio Code Elevation of Privilege Vulnerability
CVE-2025-24039 Published on February 11, 2025

Visual Studio Code Elevation of Privilege Vulnerability
Visual Studio Code Elevation of Privilege Vulnerability

Vendor Advisory NVD

Weakness Type

What is a DLL preloading Vulnerability?

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVE-2025-24039 has been classified to as a DLL preloading vulnerability or weakness.


Products Associated with CVE-2025-24039

Want to know whenever a new CVE is published for Microsoft Visual Studio Code? stack.watch will email you.

 

Affected Versions

Microsoft Visual Studio Code:

Exploit Probability

EPSS
0.58%
Percentile
68.73%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.