CVE-2018-0952

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.

Published: Aug 15, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-0952
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / windows_10	1607	1607.x
microsoft / windows_10	1703	1703.x
microsoft / windows_10	1709	1709.x
microsoft / windows_server_2016	1709	1709.x
microsoft / windows_10	1803	1803.x
microsoft / windows_server_2016	1803	1803.x
microsoft / visual_studio_2017	15.8	15.8.x
microsoft / visual_studio_2015	--update3	--update3.x

http://www.securityfocus.com/bid/105048
http://www.securitytracker.com/id/1041466
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952
https://www.exploit-db.com/exploits/45244/

Vulnerability Database

289,571

CVE-2018-0952