CVE-2020-1293

HIGH

Diagnostics Hub Standard Collector - Privilege Escalation

Title source: llm
STIX 2.1

Description

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1278.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0078
EPSS Percentile 52.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (17)
microsoft/visual_studio 2015 update3
microsoft/visual_studio_2017 15.0 - 15.9
microsoft/visual_studio_2019 16.0 - 16.6
microsoft/windows_10
microsoft/windows_10 1607
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
... and 7 more
Published Jun 09, 2020
Tracked Since Feb 18, 2026