VYPR
← All advisories
High severity7.0NVD Advisory· Published Jan 11, 2022· Updated Jun 17, 2026

CVE-2022-21871

CVE-2022-21871

Description

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

Affected products

35
  • Microsoft/Visual Studio 2017
    cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
    Range: >=15.0,<15.9.44
  • Microsoft/Visual Studio
    cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
    Range: >=16.0,<16.7.25
  • Microsoft/Windows 10 19095 versions
    cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*+ 4 more
    • cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*range: <10.0.10240.19177
    • cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*range: <10.0.10240.19177
    • cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*range: <10.0.18363.2037
    • (no CPE)range: 10.0.10240.0
    • (no CPE)range: 10.0.0
  • Microsoft/Windows 10 16077 versions
    cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*+ 6 more
    • cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*range: <10.0.14393.4886
    • cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*range: <10.0.14393.4886
    • cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*range: <10.0.19042.1466
    • cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*range: <10.0.19044.1466
    • (no CPE)range: 10.0.14393.0
    • (no CPE)range: 10.0.0
    • (no CPE)range: 10.0.19043.0
  • Microsoft/Windows 10 18092 versions
    cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*range: <10.0.17763.2452
    • (no CPE)range: 10.0.0
  • Microsoft/Windows 10 21h12 versions
    cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*range: <10.0.19043.1466
    • (no CPE)range: 10.0.0
  • Microsoft/Windows 11 21h22 versions
    cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*range: <10.0.22000.434
    • (no CPE)range: 10.0.0
  • Microsoft/Windows Server 20033 versions
    cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server:2022:*:*:*:*:*:*:*
    • (no CPE)range: 10.0.20348.0
    • (no CPE)range: 10.0.0
  • Microsoft/Windows Server 20163 versions
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*
    • (no CPE)range: 10.0.14393.0
  • Microsoft/Windows Server 20192 versions
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
    • (no CPE)range: 10.0.17763.0
  • Microsoft/Diagnostics Hub Standard Collector Runtimellm-create
  • Microsoft/Microsoft Visual Studio 2015 Update 3v5
    Range: 14.0.0
  • Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)v5
    Range: 15.9.0
  • Microsoft/Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)v5
    Range: 16.0.0
  • Microsoft/Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)v5
    Range: 15.0.0
  • Microsoft/Windows Server 2016 (Server Core installation)v5
    Range: 10.0.14393.0
  • Microsoft/Windows Server 2019 (Server Core installation)v5
    Range: 10.0.17763.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.