Vulnerability · Published Apr 13, 2021 · Assigned by microsoft
CVE-2021-28322Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
High 7.8
In plain English
A high-severity security flaw in Microsoft Visual Studio 2015 Update 3 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)1.0%top 35.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Affected products (as reported)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28322 x_refsource_MISC
- 20210419 CVE-2021-28321-CVE-2021-28323: elevation of privileges in Microsoft Diaghub mailing-list, x_refsource_FULLDISC
- http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html x_refsource_MISC