CVE-2024-43603 Visual Studio Collector Service Denial of Service Vulnerability

Medium 5.5 Published 8 Oct 2024 Updated 19 Aug 2026

An attacker can cause a denial of service in the Visual Studio Collector Service via a path traversal vulnerability.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-43603?

CVE-2024-43603 is a medium-severity path traversal vulnerability in Microsoft Visual Studio, published on 8 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Visual Studio Collector Service Denial of Service Vulnerability

Weakness: CWE-59

Which versions are affected by CVE-2024-43603?

It affects 4 products.

Products include Microsoft Visual Studio, Microsoft Visual Studio 2017, Microsoft Visual Studio 2019, Microsoft Visual Studio 2022.

How do I fix CVE-2024-43603?

No fix has been published for CVE-2024-43603 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2024-43603 being exploited?

There is no known exploitation of CVE-2024-43603 in the wild and no public exploit code.

All Microsoft Visual Studio vulnerabilities

Sources

Also known as GHSA-8mp2-xq24-ffh7.