The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities.

  - Vulnerability in Gitk where when a user clones an untrusted repository and runs Gitk without additional     command arguments, any writable file can be created and truncated. The option 'Support per-file encoding'     must have been enabled. (CVE-2025-27613)

  - Vulnerability in Gitk where a Git repository can be crafted in such a way that a user who has cloned the     repository can be tricked into running any script supplied by the attacker by invoking gitk filename,     where filename has a particular structure. (CVE-2025-27614)

  - Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized     attacker to elevate privileges over a network. (CVE-2025-49739)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Security Updates for Microsoft Visual Studio Products (July 2025)

high Nessus Plugin ID 241959

Version 1.1