CVE-2020-0810

HIGH

Visual Studio 2015, 2017 <15.9, 2019 <16.4 - Authenticated Elevation of Privilege via File Creation

Title source: llm
STIX 2.1

Description

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system.An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.The update addresses the vulnerability by not permitting Diagnostics Hub Standard Collector or the Visual Studio Standard Collector to create files in arbitrary locations., aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0100
EPSS Percentile 59.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (15)
microsoft/visual_studio_2015
microsoft/visual_studio_2017 15.1 - 15.9
microsoft/visual_studio_2019 16.0 - 16.4
microsoft/windows_10
microsoft/windows_10 1607
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
... and 5 more
Published Mar 12, 2020
Tracked Since Feb 18, 2026