NetSight
high7.8

CVE-2020-1393

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unse…

Impact

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1418.

Affected products

VendorProductAffected versions
MicrosoftVisual Studio
Version 2015
MicrosoftVisual Studio 2017
from 15.0 before 15.9.25
MicrosoftVisual Studio 2019
from 16.0 before 16.4.11
from 16.5.0 before 16.6.4
MicrosoftWindows 10
All versions
Versions 1607, 1709, 1803, 1809, 1903
MicrosoftWindows Server 2016
All versions
Versions 1903, 1909, 2004
MicrosoftWindows Server 2019
All versions

References