{"id":"CVE-2024-43590","title":"Visual C++ Redistributable Installer Elevation of Privilege Vulnerability","summary":"Visual C++ Redistributable Installer Elevation of Privilege Vulnerability","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-284"],"vendor":"microsoft","product":"visual_c++_redistributable","affected":["visual_c++_redistributable >= 10.0.0, < 14.40.33816","visual_studio_2017 >= 15.0, < 15.9.67","visual_studio_2019 >= 15.0, < 15.9.67","visual_studio_2019 >= 16.0, < 16.11.41","visual_studio_2022 >= 17.6.0, < 17.6.20","visual_studio_2022 >= 17.8.0, < 17.8.15","visual_studio_2022 >= 17.10.0, < 17.10.8","visual_studio_2022 >= 17.11.0, < 17.11.5"],"patched":["visual_c++_redistributable 14.40.33816","visual_studio_2017 15.9.67","visual_studio_2019 16.11.41","visual_studio_2022 17.11.5"],"published":"2024-10-08","updated":"2026-07-07","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-43590","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590","label":"secure@microsoft.com"}],"tags":["nvd"],"epss":0.0043,"epssPercentile":0.36662,"ingestedAt":"2026-07-07T16:15:37.938Z","slug":"CVE-2024-43590","body":"## Overview\n\nVisual C++ Redistributable Installer Elevation of Privilege Vulnerability\n\n## Affected\n\n- `visual_c++_redistributable >= 10.0.0, < 14.40.33816`\n- `visual_studio_2017 >= 15.0, < 15.9.67`\n- `visual_studio_2019 >= 15.0, < 15.9.67`\n- `visual_studio_2019 >= 16.0, < 16.11.41`\n- `visual_studio_2022 >= 17.6.0, < 17.6.20`\n- `visual_studio_2022 >= 17.8.0, < 17.8.15`\n- `visual_studio_2022 >= 17.10.0, < 17.10.8`\n- `visual_studio_2022 >= 17.11.0, < 17.11.5`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `visual_c++_redistributable 14.40.33816`\n- `visual_studio_2017 15.9.67`\n- `visual_studio_2019 16.11.41`\n- `visual_studio_2022 17.11.5`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}