CVE-2019-0727: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To…

Description

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 64% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

WI

Windows · Microsoft

1607; 1703; 1709; 1803; 1809; 1903 · source: NVD

VS

Visual Studio · Microsoft

2015 · source: NVD

VS

Visual Studio 2017 · Microsoft

15.0; 15.9 · source: NVD

VS

Visual Studio 2019 · Microsoft

16.0 · source: NVD

WS

Windows Server 2016 · Microsoft

1803; 1903 · source: NVD

WS

Windows Server 2019 · Microsoft

All versions, or not specified · source: NVD