VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-8599

CVE-2018-8599

Description

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability." This affects Microsoft Visual Studio, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.

Affected products

20
  • Microsoft/Visual Studio3 versions
    cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 2015 Update 3
  • Microsoft/Visual Studio 2017
    cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*
  • Microsoft/Windows 10 19097 versions
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
    • (no CPE)range: 32-bit Systems
  • Microsoft/Windows Server 20164 versions
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
    • (no CPE)range: (Server Core installation)
  • Microsoft/Windows Server 20192 versions
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
    • (no CPE)range: (Server Core installation)
  • Microsoft/Diagnostics Hub Standard Collector Servicellm-fuzzy
  • Microsoft/Windowsllm-fuzzy
  • Microsoft/Windows Server 2003cpe-rescue
    Range: version 1709 (Server Core Installation)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.