Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

2 vulnerabilities found for SQL Server Management Studio 20.2 by Microsoft

CVE-2025-29803 (GCVE-0-2025-29803)

Vulnerability from nvd – Published: 2025-04-12 01:32 – Updated: 2026-02-13 19:33
VLAI?
Title
Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
Summary
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.
Severity ?
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CWE
  • CWE-427 - Uncontrolled Search Path Element
Assigner
References
Impacted products
Vendor Product Version
Microsoft SQL Server Management Studio 20.2 Affected: 20.0 , < 20.2.37.0 (custom)
Create a notification for this product.
Date Public ?
2025-04-08 07:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29803",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T16:35:49.621551Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-14T16:38:36.817Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SQL Server Management Studio 20.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "20.2.37.0",
              "status": "affected",
              "version": "20.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Visual Studio Tools for Applications (VSTA)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.35907.0",
              "status": "affected",
              "version": "16.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Visual Studio Tools for Applications (VSTA)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.0.35906.0",
              "status": "affected",
              "version": "17.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "VSTA 2019 SDK",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.35907.0",
              "status": "affected",
              "version": "16.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "VSTA 2022 SDK",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.0.35906.0",
              "status": "affected",
              "version": "17.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "16.0.35907.0",
                  "versionStartIncluding": "16.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.0.35906.0",
                  "versionStartIncluding": "17.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.vsta_sdk:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.0.35906.0",
                  "versionStartIncluding": "17.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.vsta_sdk:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "16.0.35907.0",
                  "versionStartIncluding": "16.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server_management_studio:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "20.2.37.0",
                  "versionStartIncluding": "20.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-04-08T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427: Uncontrolled Search Path Element",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:33:28.832Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803"
        }
      ],
      "title": "Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29803",
    "datePublished": "2025-04-12T01:32:36.336Z",
    "dateReserved": "2025-03-11T18:19:40.248Z",
    "dateUpdated": "2026-02-13T19:33:28.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-29803 (GCVE-0-2025-29803)

Vulnerability from cvelistv5 – Published: 2025-04-12 01:32 – Updated: 2026-02-13 19:33
VLAI?
Title
Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
Summary
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.
Severity ?
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CWE
  • CWE-427 - Uncontrolled Search Path Element
Assigner
References
Impacted products
Vendor Product Version
Microsoft SQL Server Management Studio 20.2 Affected: 20.0 , < 20.2.37.0 (custom)
Create a notification for this product.
Date Public ?
2025-04-08 07:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29803",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T16:35:49.621551Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-14T16:38:36.817Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SQL Server Management Studio 20.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "20.2.37.0",
              "status": "affected",
              "version": "20.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Visual Studio Tools for Applications (VSTA)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.35907.0",
              "status": "affected",
              "version": "16.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Visual Studio Tools for Applications (VSTA)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.0.35906.0",
              "status": "affected",
              "version": "17.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "VSTA 2019 SDK",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.35907.0",
              "status": "affected",
              "version": "16.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "VSTA 2022 SDK",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.0.35906.0",
              "status": "affected",
              "version": "17.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "16.0.35907.0",
                  "versionStartIncluding": "16.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_tools_for_applications:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.0.35906.0",
                  "versionStartIncluding": "17.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.vsta_sdk:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.0.35906.0",
                  "versionStartIncluding": "17.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.vsta_sdk:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "16.0.35907.0",
                  "versionStartIncluding": "16.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:sql_server_management_studio:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "20.2.37.0",
                  "versionStartIncluding": "20.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-04-08T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427: Uncontrolled Search Path Element",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:33:28.832Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803"
        }
      ],
      "title": "Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29803",
    "datePublished": "2025-04-12T01:32:36.336Z",
    "dateReserved": "2025-03-11T18:19:40.248Z",
    "dateUpdated": "2026-02-13T19:33:28.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}