VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 11, 2019· Updated Jun 17, 2026

CVE-2019-1232

CVE-2019-1232

Description

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.

Affected products

26
  • Microsoft/Visual Studio 2017cpe-rescue3 versions
    version 15.9+ 2 more
    • (no CPE)range: version 15.9
    • cpe:2.3:a:microsoft:visual_studio_2017:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*
  • Microsoft/Windowsv5
    Range: 10 for 32-bit Systems
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019v5
    Range: 16.0
  • Microsoft/Windows 10 19097 versions
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
  • Microsoft/Windows Server 20163 versions
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Visual Studio4 versions
    cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2019:16.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2019:16.2:*:*:*:*:*:*:*
    • (no CPE)range: 2015 Update 3
  • Microsoft/Diagnostics Hub Standard Collector Servicellm-fuzzy
  • Microsoft/Windows Server 2003cpe-rescue
    Range: 2016

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.