CVE-2020-1133
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles file operations.</p>
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - secure@microsoft.com
- Published
- 2020-09-11
- Last modified
- 2024-08-04
Affected products
- Visual Studio (Microsoft)
- Visual Studio 2017 (Microsoft)
- Visual Studio 2019 (Microsoft)
- Windows 10 (Microsoft)
- Windows 10 1507 (Microsoft)
- Windows 10 1607 (Microsoft)
- Windows 10 1803 (Microsoft)
- Windows 10 1809 (Microsoft)
- Windows 10 1909 (Microsoft)
- Windows Server 1903 (Microsoft)
- Windows Server 1909 (Microsoft)
- Windows Server 2004 (Microsoft)
- Windows Server 2016 (Microsoft)
- Windows Server 2019 (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1133