CVE-2019-0727: microsoft microsoft visual studio
Vulnerability summary
CVE-2019-0727 is a high (CVSS 7.8) vulnerability in microsoft microsoft visual studio. EPSS estimates a 1.05% chance of exploitation in the next 30 days, higher than 63.6% of scored vulnerabilities.
Timeline
- 16-05-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.05%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
0.00 pp
From 1.05% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft15 products
- microsoft visual studio2015 Update 3
- microsoft visual studio 2017version 15.9 | 15.0
- microsoft visual studio 201916.0
- visual_studio2015:update3
- visual_studio_201715.0 | 15.9
1 vendor · 15 products
References
1 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0727X Refsource MISCPatchVendor Advisory