CVE-2018-0952: High severity microsoft visual studio professional 2015 vulnerability

Published Aug 15, 2018

Updated

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.

Affected Software

11 affected components

Microsoft Visual Studio 2015=update3

Microsoft Visual Studio 2017

Microsoft Visual Studio 2017=15.8

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-0952?

CVE-2018-0952 is an Elevation of Privilege vulnerability that exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations.

Which software is affected by CVE-2018-0952?

CVE-2018-0952 affects Windows Server 2016, Windows 10, and Microsoft Visual Studio.

What is the severity of CVE-2018-0952?

CVE-2018-0952 has a severity score of 7.8, which is considered high.

How can I fix CVE-2018-0952?

To fix CVE-2018-0952, apply the necessary security updates provided by Microsoft.

Where can I find more information about CVE-2018-0952?

You can find more information about CVE-2018-0952 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/105048), [SecurityTracker](http://www.securitytracker.com/id/1041466), [Microsoft Security Guidance Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952).