Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Visual_studio | Microsoft | 2015-update3 (including) | 2015-update3 (including) |
| Visual_studio_2017 | Microsoft | 15.0 (including) | 15.9 (including) |
| Visual_studio_2019 | Microsoft | 16.0 (including) | 16.7 (including) |
| Visual_studio_2019 | Microsoft | 16.8 (including) | 16.9 (including) |
| Windows_10 | Microsoft | 20h2 (including) | 20h2 (including) |
| Windows_10 | Microsoft | 1803 (including) | 1803 (including) |
| Windows_10 | Microsoft | 1809 (including) | 1809 (including) |
| Windows_10 | Microsoft | 1909 (including) | 1909 (including) |
| Windows_10 | Microsoft | 2004 (including) | 2004 (including) |
| Windows_server_2016 | Microsoft | 20h2 (including) | 20h2 (including) |
| Windows_server_2016 | Microsoft | 1909 (including) | 1909 (including) |
| Windows_server_2016 | Microsoft | 2004 (including) | 2004 (including) |
| Windows_server_2019 | Microsoft | - (including) | - (including) |