CVE-2018-0952

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.

Score

CVSS 3.0 7.8 High

Status

Modified - secure@microsoft.com

Published

2018-08-15

Last modified

2024-08-05

Affected products

• Microsoft Visual Studio (Microsoft)
• Visual Studio 2015 (Microsoft)
• Visual Studio 2017 (Microsoft)
• Windows 10 (Microsoft)
• Windows 10 Servers (Microsoft)
• Windows Server 2016 (Microsoft)

References

• http://www.securityfocus.com/bid/105048
• http://www.securitytracker.com/id/1041466
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952
• https://www.exploit-db.com/exploits/45244/