<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could explo
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by…
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 Version 1803 | 10.0.0 |
| Microsoft | Windows 10 Version 1809 | 10.0.0 |
| Microsoft | Windows Server 2019 | 10.0.0 |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.0 |
| Microsoft | Windows 10 Version 1909 | 10.0.0 |
| Microsoft | Windows Server, version 1909 (Server Core installation) | 10.0.0 |
| Microsoft | Windows 10 Version 1709 for 32 | bit Systems — 10.0.0 |
| Microsoft | Windows 10 Version 1709 | 10.0.0 |
| Microsoft | Windows 10 Version 1903 for 32 | bit Systems — 10.0.0 |
| Microsoft | Windows 10 Version 1903 for x64 | based Systems — 10.0.0 |
| Microsoft | Windows 10 Version 1903 for ARM64 | based Systems — 10.0.0 |
| Microsoft | Windows Server, version 1903 (Server Core installation) | 10.0.0 |
| Microsoft | Windows 10 Version 2004 | 10.0.0 |
| Microsoft | Windows Server version 2004 | 10.0.0 |
| Microsoft | Windows 10 Version 1507 | 10.0.0 |
| Microsoft | Windows 10 Version 1607 | 10.0.0 |
| Microsoft | Windows Server 2016 | 10.0.0 |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.0 |
| Microsoft | Microsoft Visual Studio 2019 version 16.7 (includes 16.0 | 16.6) — 16.0.0 |
| Microsoft | Microsoft Visual Studio 2017 version 15.9 (includes 15.0 | 15.8) — 15.9.0 |
| Microsoft | Microsoft Visual Studio 2019 version 16.0 | 16.0 |
| Microsoft | Microsoft Visual Studio 2019 version 16.4 (includes 16.0 | 16.3) — 16.0 |
| Microsoft | Microsoft Visual Studio 2015 Update 3 | 14.0.0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.