CVE-2022-21871

4 documents4 sources
Severity
7.0HIGH
EPSS
0.3%
top 45.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
29
Microsoft Microsoft Visual Studio 2015 Update 3Microsoft Microsoft Visual Studio 2017 Version 15.9 (includes 15.0 - 15.8)Microsoft Microsoft Visual Studio 2019 Version 16.7 (includes 16.0 – 16.6)+26 more
Timeline
PublishedJan 11
Latest updateJan 12

Description

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages30 packages

▶NVDmicrosoft/windows_10_1507< 10.0.10240.19177
▶NVDmicrosoft/windows_10_1607< 10.0.14393.4886
▶NVDmicrosoft/windows_10_1809< 10.0.17763.2452
▶NVDmicrosoft/windows_10_1909< 10.0.18363.2037
▶NVDmicrosoft/windows_10_20h2< 10.0.19042.1466

🔴Vulnerability Details

2
GHSA
GHSA-96mc-ph6g-jw78: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability↗2022-01-12
▶
CVEList
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability↗2022-01-11
▶

📋Vendor Advisories

1
Microsoft
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability↗2022-01-11
▶
CVE-2022-21871 (HIGH CVSS 7) | Microsoft Diagnostics Hub Standard | cvebase.io