CVE-2018-0952
First published: Wed Aug 15 2018(Updated: )
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Visual Studio 2015 | =update3 | |
| Microsoft Visual Studio 2017 | ||
| Microsoft Visual Studio 2017 | =15.8 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1709 | |
| Microsoft Windows Server 2016 | =1803 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-0952?
CVE-2018-0952 is an Elevation of Privilege vulnerability that exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations.
Which software is affected by CVE-2018-0952?
CVE-2018-0952 affects Windows Server 2016, Windows 10, and Microsoft Visual Studio.
What is the severity of CVE-2018-0952?
CVE-2018-0952 has a severity score of 7.8, which is considered high.
How can I fix CVE-2018-0952?
To fix CVE-2018-0952, apply the necessary security updates provided by Microsoft.
Where can I find more information about CVE-2018-0952?
You can find more information about CVE-2018-0952 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/105048), [SecurityTracker](http://www.securitytracker.com/id/1041466), [Microsoft Security Guidance Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952).
- agent/references
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/author
- agent/remedy
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft visual studio 2015
- version/microsoft visual studio 2015/update3
- canonical/microsoft visual studio 2017
- version/microsoft visual studio 2017/15.8
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1709
- version/microsoft windows server 2016/1803