CVE-2025-21178 — Heap-based Buffer Overflow in Microsoft Visual Studio 2015 Update 3

CWE-122 — Heap-based Buffer OverflowCWE-125 — Out-of-bounds Read2 documents2 sources
Severity
8.8HIGHCNA
No vector
EPSS
0.4%
top 42.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Microsoft Visual Studio 2015 Update 3Microsoft Visual Studio 2017 Version 15.9Microsoft Visual Studio 2019 Version 16.11+4 more
Timeline
PublishedJan 14

Description

Visual Studio Remote Code Execution Vulnerability Visual Studio Remote Code Execution Vulnerability

Affected Packages7 packages

▶CVEListV5microsoft/microsoft_visual_studio_2015_update_314.0.0 — 14.0.24252.2

🔴Vulnerability Details

1
CVEList
Visual Studio Remote Code Execution Vulnerability↗2025-01-14
▶

📋Vendor Advisories

1
Microsoft
Visual Studio Remote Code Execution Vulnerability↗2025-01-14
▶
CVE-2025-21178 — Heap-based Buffer Overflow | cvebase