CVE-2024-43590: microsoft visual c++ redistributable – CVSS 7.8 · Watchpost

← All vulnerabilities

CVE-2024-43590

HIGH 7.8CVE-2024-43590 · Published 08/10/2024 · updated 07/07/2026

In short

CVE-2024-43590 is a HIGH (CVSS 7.8) vulnerability affecting visual c++ redistributable (microsoft), visual studio 2017 (microsoft), visual studio 2019 (microsoft).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.2% of all vulnerabilities.
Fix: update to 14.40.33816, 15.9.67, 16.11.41, 17.10.8 or later.

Package	Affected versions	Patched versions
visual c++ redistributable microsoft	`≥ 10.0.0, < 14.40.33816`	`14.40.33816`
visual studio 2017 microsoft	`≥ 15.0, < 15.9.67`	`15.9.67`
visual studio 2019 microsoft	`≥ 15.0, < 15.9.67≥ 16.0, < 16.11.41`	`15.9.6716.11.41`
visual studio 2022 microsoft	`≥ 17.10.0, < 17.10.8≥ 17.11.0, < 17.11.5≥ 17.6.0, < 17.6.20≥ 17.8.0, < 17.8.15`	`17.10.817.11.517.6.2017.8.15`

Description

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43590 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free