5.5
Medium
CVE-2020-1133 An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file…
Description
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles file operations.</p>
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) 16.0 | 16.0.0 → latest | No fix stated |
| Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) 15.9 | 15.9.0 → latest | No fix stated |
| Microsoft Visual Studio 2019 version 16.0 16.0 | 16.0 → latest | No fix stated |
| Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) 16.0 | 16.0 → latest | No fix stated |
| Microsoft Visual Studio 2015 Update 3 14.0 | 14.0.0 → latest | No fix stated |
| Windows 10 Version 1803 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1809 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
Show the 14 other branches Hide the 14 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 Version 1909 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server, version 1909 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1709 for 32-bit Systems 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1709 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1903 for 32-bit Systems 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1903 for x64-based Systems 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1903 for ARM64-based Systems 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server, version 1903 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 2004 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server version 2004 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1507 10.0 | 10.0.0 → latest | No fix stated |
| Windows 10 Version 1607 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2016 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2016 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
The 32 CVEs of Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) →
CVE-2022-24513
Visual Studio Elevation of Privilege Vulnerability
7.8
High
CVE-2022-24512
.NET and Visual Studio Remote Code Execution Vulnerability
6.3
Medium
CVE-2022-24464
.NET and Visual Studio Denial of Service Vulnerability
7.5
High
CVE-2022-21871
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
7.0
High