An elevation of privilege vulnerability has been identified in Microsoft Visual Studio, designated as CVE-2025-49739. This flaw arises from improper link resolution before file access, commonly referred to as 'link following,' which could allow an unauthorized attacker to escalate privileges...
Here’s a summary of the main points from the Neowin article and Microsoft’s update:
What’s Happening?
Microsoft 365 will disable legacy authentication protocols (Relying Party Suite [RPS] and FrontPage Remote Procedure Call [FPRPC]) for file access.
This affects Microsoft 365 and Office apps...