high7.8Public exploit code
CVE-2018-0952
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows 10 - Diagnostics Hub Standard Collector Service Privilege Escalation2018-08-22 · local · windows · Verified
Impact
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Studio 2015 | All versions |
| Microsoft | Visual Studio 2017 | All versions Version 15.8 |
| Microsoft | Windows 10 | All versions Versions 1607, 1703, 1709, 1803 |
| Microsoft | Windows Server 2016 | All versions Versions 1709, 1803 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105048
- http://www.securitytracker.com/id/1041466
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952
- https://www.exploit-db.com/exploits/45244/
- http://www.securityfocus.com/bid/105048
- http://www.securitytracker.com/id/1041466
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952
- https://www.exploit-db.com/exploits/45244/