CVE-2022-21871: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
First published: Tue Jan 11 2022(Updated: )
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Visual Studio 2017 | >=15.0<15.9.44 | |
| Microsoft Visual Studio 2019 | >=16.0<16.7.25 | |
| Microsoft Visual Studio 2019 | >=16.8<16.9.17 | |
| Microsoft Windows 10 | <10.0.10240.19177 | |
| Microsoft Windows 10 | <10.0.10240.19177 | |
| Microsoft Windows 10 1607 | <10.0.14393.4886 | |
| Microsoft Windows 10 1607 | <10.0.14393.4886 | |
| Microsoft Windows 10 1809 | <10.0.17763.2452 | |
| Microsoft Windows 10 1909 | <10.0.18363.2037 | |
| Microsoft Windows 10 20h2 | <10.0.19042.1466 | |
| Microsoft Windows 10 21h1 | <10.0.19043.1466 | |
| Microsoft Windows 10 21h2 | <10.0.19044.1466 | |
| Microsoft Windows 11 21h2 | <10.0.22000.434 | |
| Microsoft Windows Server | =2022 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =20h2 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 10 1507 | <10.0.10240.19177 | |
| Microsoft Windows 10 1507 | <10.0.10240.19177 | |
| Microsoft Windows 10 | =21H1 | |
| Microsoft Visual Studio 2019 (includes 16.0 - 16.8) | =16.9 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server | =20H2 | |
| Microsoft Visual Studio 2015 | =3 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | ||
| Microsoft Visual Studio 2019 (includes 16.0 – 16.6) | =16.7 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2022 | ||
| Microsoft Windows 10 | =21H1 | |
| Microsoft Windows 10 | =21H1 | |
| Microsoft Windows 10 | =21H2 | |
| Microsoft Visual Studio 2017 (includes 15.0 - 15.8) | =15.9 | |
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows Server 2022 | ||
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows 10 | =20H2 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =20H2 | |
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 10 | =1607 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability?
The vulnerability ID is CVE-2022-21871.
What is the severity of CVE-2022-21871?
The severity of CVE-2022-21871 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2022-21871?
Microsoft Visual Studio 2017 (version 15.0 to 15.9.44), Microsoft Visual Studio 2019 (version 16.0 to 16.7.25), Microsoft Windows 10 (version 1507), Microsoft Windows Server 2016 (version 1607), Microsoft Windows 10 1909, Microsoft Windows 10 20h2, Microsoft Windows 10 21h1, Microsoft Windows Server 2019, Microsoft Windows 11 21h2, and Microsoft Windows Server 2022 are affected by CVE-2022-21871.
How does the Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability impact affected systems?
The vulnerability allows an attacker to elevate privileges on the affected systems.
Is there a fix available for CVE-2022-21871?
Yes, Microsoft has released security updates to address the vulnerability. It is recommended to install the latest updates from Microsoft.
- agent/author
- agent/type
- agent/description
- agent/remedy
- agent/title
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- collector/msrc-cve
- source/Microsoft
- agent/software-canonical-lookup
- agent/severity
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/microsoft
- canonical/microsoft visual studio 2017
- version/microsoft visual studio 2017/15.0
- canonical/microsoft visual studio 2019
- version/microsoft visual studio 2019/16.0
- version/microsoft visual studio 2019/16.8
- canonical/microsoft windows 10
- canonical/microsoft windows 10 1607
- canonical/microsoft windows 10 1809
- canonical/microsoft windows 10 1909
- canonical/microsoft windows 10 20h2
- canonical/microsoft windows 10 21h1
- canonical/microsoft windows 10 21h2
- canonical/microsoft windows 11 21h2
- canonical/microsoft windows server
- version/microsoft windows server/2022
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/20h2
- canonical/microsoft windows server 2019
- version/microsoft windows 10/21h1
- canonical/microsoft visual studio 2019 (includes 16.0 - 16.8)
- version/microsoft visual studio 2019 (includes 16.0 - 16.8)/16.9
- version/microsoft windows server/20h2
- canonical/microsoft visual studio 2015
- version/microsoft visual studio 2015/3
- version/microsoft windows 10/1909
- version/microsoft windows 10/1809
- version/microsoft windows 10/1607
- canonical/microsoft visual studio 2019 (includes 16.0 – 16.6)
- version/microsoft visual studio 2019 (includes 16.0 – 16.6)/16.7
- canonical/microsoft windows server 2022
- version/microsoft windows 10/21h2
- canonical/microsoft visual studio 2017 (includes 15.0 - 15.8)
- version/microsoft visual studio 2017 (includes 15.0 - 15.8)/15.9
- canonical/microsoft windows 11
- version/microsoft windows 11/21h2
- version/microsoft windows 10/20h2
- canonical/microsoft windows 10 1507