Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2020-1257
Security VulnerabilityReleased: Jun 9, 2020
- Assigning CNA
- Microsoft
- CVE.org link
- CVE-2020-1257
Executive Summary
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.
An attacker with unprivileged access to a vulnerable system could exploit this vulnerability.
The security update addresses the vulnerability by ensuring the Diagnostics Hub Standard Collector Service properly handles file operations.
Exploitability
The following table provides an exploitability assessment for this vulnerability at the time of original publication.
- Publicly disclosed
- No
- Exploited
- No
- Exploitability assessment
- Exploitation Less Likely
Acknowledgements
- Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472)
- Yuki Chen of Qihoo 360 Vulcan Team
Security Updates
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle.
Release date Descending
Product
Platform
Impact
Max Severity
Article
Download
Build Number
Jun 9, 2020
Windows 10 Version 2004 for ARM64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 2004 for 32-bit Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows Server 2016 (Server Core installation)
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1607 for x64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1607 for 32-bit Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows Server, version 1903 (Server Core installation)
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1903 for ARM64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1903 for x64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1903 for 32-bit Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1709 for ARM64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1709 for x64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1709 for 32-bit Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows Server, version 1909 (Server Core installation)
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1909 for ARM64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1909 for x64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1909 for 32-bit Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows Server 2019 (Server Core installation)
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1809 for ARM64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1809 for x64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1809 for 32-bit Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1803 for ARM64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows Server, version 1803 (Server Core Installation)
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1803 for x64-based Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows 10 Version 1803 for 32-bit Systems
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Microsoft Visual Studio 2019 version 16.0
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Microsoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5)
-
Elevation of Privilege
Important
- -
Jun 9, 2020
Windows Server, version 2004 (Server Core installation)
-
Elevation of Privilege
Important
- -
All results loaded
Loaded all 33 rows
Disclaimer
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Revisions
version
revisionDate
description
1.0
Jun 9, 2020
Information published.
How satisfied are you with the MSRC Security Update Guide?