Vulnerability · Published Sep 11, 2020 · Assigned by microsoft
CVE-2020-1130Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Medium 6.6
In plain English
A medium-severity security flaw in Microsoft Visual Studio 2015 Update 3 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Official description
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles data operations.</p>