Visual Studio Remote Code Execution Vulnerability
Deserialization of untrusted data in Visual Studio allows an authorized attacker to execute code locally.
MSRC compact vulnerability detail
CVE-2025-53772 · Web Deploy Remote Code Execution Vulnerability
Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
Signals
Web Deploy
Remote Code Execution
Exploited: No
Publicly disclosed: No
Exploitability: Exploitation Less Likely
CWE
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Description
Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
FAQ / Articles
Web Deploy Remote Code Execution Vulnerability
Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
FAQ
How could an attacker exploit the vulnerability? An authenticated attacker could exploit the vulnerability by sending a malicious http request to the web server.