VDB
CVE-2019-1232
CVE-2019-1232
PUBLISHED
Reported by microsoft · Published September 11, 2019
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Visual Studio | 2015 Update 3 |
| Microsoft | Windows | 10 for 32-bit Systems, 10 for x64-based Systems, 10 Version 1607 for 32-bit Systems |
| Microsoft | Windows Server | 2016, 2016 (Core installation), version 1803 (Core Installation) |
| Microsoft | Microsoft Visual Studio 2017 | version 15.9, 15.0 |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | unspecified |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | unspecified |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | unspecified |
| Microsoft | Windows Server, version 1903 (Server Core installation) | unspecified |
| Microsoft | Microsoft Visual Studio 2019 | 16.0, 16.2 |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | * |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | * |
| Microsoft | Microsoft Visual Studio 2017 | 15.0, 15.9 |
| Microsoft | Windows Server | 2019, *, 2016 |
| Microsoft | Windows Server, version 1903 (Server Core installation) | * |
| Microsoft | Microsoft Visual Studio 2019 | 16.0, 16.2 |
| Microsoft | Windows | * |
| Microsoft | Microsoft Visual Studio | * |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | * |
Timeline
- Sep 11, 2019 CVE Published
- Jan 10, 2021 PoC Published (2 in total, the first dated here)
- Apr 14, 2021 EPSS Score (30 in total, the first dated here)
- Mar 30, 2026 Security Advisory (3 in total, the first dated here)
- Jun 17, 2026 CVE Updated
- Sep 15, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2019-1232
vulnetix vdb fixes CVE-2019-1232Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2019-1232/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart