CVE-2020-1130
EUVD-2020-1201511.09.2020, 17:15
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles data operations.</p>Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | visual_studio_2017 | 15.0 ≤ 𝑥 < 15.9.27 |
| microsoft | visual_studio_2019 | 16.0 ≤ 𝑥 < 16.4.13 |
| microsoft | visual_studio_2019 | 16.5 ≤ 𝑥 < 16.7.3 |
| microsoft | windows_10 | - |
| microsoft | windows_server_2016 | - |
| microsoft | windows_server_2019 | - |
𝑥
= Vulnerable software versions
Windows Releases
Platform | Version | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows 10 |
| ||||||||||||||||
| Windows Server |
| ||||||||||||||||
| Windows Server 2016 |
| ||||||||||||||||
| Windows Server 2019 |
|