CVE-2012-0008: Microsoft Visual Studio

Medium severity, CVSS 6.9. EPSS: 1.7% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."

Affected products

• Microsoft Visual Studio: version 2008 only; version 2010 only

Published 2012-03-13. Last modified 2026-06-16.