Vulnerability Description
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVSS Score
5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Visual Studio | 2015 |
| Microsoft | Visual Studio 2017 | >= 15.0, <= 15.9 |
| Microsoft | Visual Studio 2019 | >= 16.0, <= 16.11 |
| Microsoft | Windows 10 | - |
| Microsoft | Windows 11 | - |
| Microsoft | Windows Server 2016 | - |
| Microsoft | Windows Server 2019 | - |
| Microsoft | Windows Server 2022 | - |
Related Weaknesses (CWE)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-4227PatchVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1306/Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-4227PatchVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1306/Third Party Advisory
FAQ
What is CVE-2021-42277?
CVE-2021-42277 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
How severe is CVE-2021-42277?
CVE-2021-42277 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-42277?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Visual Studio, Microsoft Visual Studio 2017, Microsoft Visual Studio 2019, Microsoft Windows 10, Microsoft Windows 11.