Vulnerability · Published Sep 11, 2020 · Assigned by microsoft
CVE-2020-1133Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Medium 5.5
In plain English
A medium-severity security flaw in Microsoft Visual Studio 2015 Update 3 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Official description
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles file operations.</p>