CVE-2022-21871: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

PriorityP338high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.68%

48.6th percentile

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

Affected

46 ranges· showing 25

Vendor	Product	Version range	Fixed in
microsoft	microsoft_visual_studio_2015_update_3	>= 14.0.0 < 27551.00	27551.00
microsoft	microsoft_visual_studio_2017_version_15.9	>= 15.9.0 < 15.9.44	15.9.44
microsoft	microsoft_visual_studio_2019_version_16.7	>= 16.0.0 < 16.7.25	16.7.25
microsoft	microsoft_visual_studio_2019_version_16.9	>= 15.0.0 < 16.9.17	16.9.17
microsoft	visual_studio_2017	>= 15.0 < 15.9.44	15.9.44
microsoft	visual_studio_2019	>= 16.0 < 16.7.25	16.7.25
microsoft	visual_studio_2019	>= 16.8 < 16.9.17	16.9.17
microsoft	windows_10_1507	< 10.0.10240.19177	10.0.10240.19177
microsoft	windows_10_1607	< 10.0.14393.4886	10.0.14393.4886
microsoft	windows_10_1809	< 10.0.17763.2452	10.0.17763.2452
microsoft	windows_10_1909	< 10.0.18363.2037	10.0.18363.2037
microsoft	windows_10_20h2	< 10.0.19042.1466	10.0.19042.1466
microsoft	windows_10_21h1	< 10.0.19043.1466	10.0.19043.1466
microsoft	windows_10_21h2	< 10.0.19044.1466	10.0.19044.1466
microsoft	windows_10_version_1507	>= 10.0.10240.0 < 10.0.10240.19177	10.0.10240.19177
microsoft	windows_10_version_1607	>= 10.0.14393.0 < 10.0.14393.4886	10.0.14393.4886
microsoft	windows_10_version_1809	>= 10.0.0 < 10.0.17763.2452	10.0.17763.2452
microsoft	windows_10_version_1809	>= 10.0.17763.0 < 10.0.17763.2452	10.0.17763.2452
microsoft	windows_10_version_1909	>= 10.0.0 < 10.0.18363.2037	10.0.18363.2037
microsoft	windows_10_version_20h2	>= 10.0.0 < 10.0.19042.1466	10.0.19042.1466
microsoft	windows_10_version_21h1	>= 10.0.0 < 10.0.19043.1466	10.0.19043.1466
microsoft	windows_10_version_21h2	>= 10.0.19043.0 < 10.0.19043.1466	10.0.19043.1466
microsoft	windows_11_21h2	< 10.0.22000.434	10.0.22000.434
microsoft	windows_11_version_21h2	>= 10.0.0 < 10.0.22000.434	10.0.22000.434
microsoft	windows_server	—	—

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

vendor_msrc7.0HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.