CVE-2021-1651: falha de alta gravidade em Microsoft Visual Studio 2015 Update 3
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Publicada em · Atualizada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.8%
probabilidade de exploração
0.8%top 44% das CVEs
exploração observada
nãonenhuma fonte reporta
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Visual Studio 2015 Update 3Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)Microsoft · Microsoft Visual Studio 2019 version 16.0Microsoft · Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)Microsoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)Microsoft · Microsoft Visual Studio 2019 version 16.8Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1803Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 1909Microsoft · Windows 10 Version 2004Microsoft · Windows 10 Version 20H2Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server, version 1909 (Server Core installation)Microsoft · Windows Server version 2004Microsoft · Windows Server version 20H2CVEs relacionadas — Microsoft Visual Studio 2015 Update 3
No mesmo produto, das mais perigosas para as menos.
CVE-2020-1147HIGHCVE-2020-1147EPSS 94.0%KEVCVE-2021-36952HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 51.5%CVE-2021-26701HIGH.NET Core Remote Code Execution VulnerabilityEPSS 30.1%CVE-2020-1597—ASP.NET Core Denial of Service VulnerabilityEPSS 6.6%CVE-2020-1108—.NET Core & .NET Framework Denial of Service VulnerabilityEPSS 6.4%CVE-2020-1416—CVE-2020-1416EPSS 5.9%