{"id":"CVE-2019-0727","aliases":["EUVD-2019-1487","GHSA-4vgf-c8vc-m3fj"],"status":"published","title":"An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the...","description":"An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01049,"percentile":0.64464,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-05-16T18:17:00Z","modified":"2026-06-17T02:08:47Z","products":[{"vendor":"microsoft","product":"microsoft visual studio"},{"vendor":"microsoft","product":"microsoft visual studio 2017"},{"vendor":"microsoft","product":"microsoft visual studio 2019"},{"vendor":"microsoft","product":"visual_studio"},{"vendor":"microsoft","product":"visual_studio_2017"},{"vendor":"microsoft","product":"visual_studio_2019"},{"vendor":"microsoft","product":"windows"},{"vendor":"microsoft","product":"windows 10 version 1903 for 32-bit systems"},{"vendor":"microsoft","product":"windows 10 version 1903 for arm64-based systems"},{"vendor":"microsoft","product":"windows 10 version 1903 for x64-based systems"},{"vendor":"microsoft","product":"windows server"},{"vendor":"microsoft","product":"windows server, version 1903 (server core installation)"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0727","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0727"},{"url":"https://github.com/advisories/GHSA-4vgf-c8vc-m3fj"}],"sources":{"cve":[{"id":"CVE-2019-0727","description":"An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.","status":"published","published":"2019-05-16T18:17:00Z","modified":"2024-08-04T17:58:57.966Z","updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-1487","description":"An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.","status":"published","published":"2019-05-16T18:17:00Z","modified":"2024-08-04T17:58:57Z","updated_at":"2026-11-03T03:07:00.558698Z"}],"ghsa":[{"id":"GHSA-4vgf-c8vc-m3fj","title":"An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the...","description":"An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.","status":"published","published":"2022-05-24T16:45:48Z","modified":"2023-01-28T05:05:06Z","updated_at":"2026-11-02T14:44:18.061425Z"}],"nvd":[{"id":"CVE-2019-0727","description":"An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.","status":"published","published":"2019-05-16T19:29:00.537Z","modified":"2026-06-17T02:08:47.18Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:05:13.880207Z"}]}}