The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly     impersonates certain file operations. An attacker who successfully exploited this vulnerability could gain     elevated privileges. An attacker with unprivileged access to a vulnerable system could exploit this vulnerability.
    The security update addresses the vulnerability by ensuring the Diagnostics Hub Standard Collector Service     properly impersonates file operations. (CVE-2019-1232)

  - A denial of service vulnerability exists when .NET Core improperly handles web requests. An attacker who     successfully exploited this vulnerability could cause a denial of service against a .NET Core web application.
    The vulnerability can be exploited remotely, without authentication. The update addresses the vulnerability by     correcting how the .NET Core web application handles web requests. (CVE-2019-1301)

Detections

Analytics

Security Updates for Microsoft Visual Studio Products (September 2019)

high Nessus Plugin ID 128708

Version 1.9

Version 1.8

Version 1.9 Feb 14, 2025, 12:18 PM IAVM reference Plugin Feed: 202502141218
Version 1.8 Jul 25, 2023, 7:12 PM Detection Plugin Feed: 202307251912