CVE-2020-1133

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles file operations.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Sep 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-11347.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker w CVE-2020-11357.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who suc CVE-2020-11367.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully ex CVE-2020-11377.8An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who s CVE-2020-11387.0An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exp CVE-2020-11397.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully e CVE-2020-11407.8An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited thi CVE-2020-11415.5An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allow CVE-2020-114147.5An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight ex CVE-2020-114154.9An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP ser CVE-2020-114165.4JetBrains Space through 2020-04-22 allows stored XSS in Chats.CVE-2020-11427.8An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An att