CVE-2018-0952

CVE Database · CVE-2018-0952

CVE-2018-0952

· N/AModified

CVSS v3.1

N/A

EPSS

6.23%

Published

Aug 15, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Windows 10 - Diagnostics Hub Standard Collector Service Privilege Escalation TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.

Affected Products (11)

microsoft · visual_studio_2015vulnerable

microsoft · visual_studio_2017vulnerable

microsoft · windows_10vulnerable

microsoft · windows_server_2016vulnerable

References (8)

http://www.securityfocus.com/bid/105048

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041466

Third Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952

PatchVendor Advisory

https://www.exploit-db.com/exploits/45244/

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/105048

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs