CVE-2020-1130: Microsoft Visual Studio

Medium severity, CVSS 6.6. EPSS: 0.8% chance of exploitation in the next 30 days.

<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles data operations.</p>

Affected products

  • Microsoft Visual Studio: version 2015 only
  • Microsoft Visual Studio 2017: from 15.0, before 15.9.27 (fixed in 15.9.27)
  • Microsoft Visual Studio 2019: from 16.0, before 16.4.13 (fixed in 16.4.13); from 16.5, before 16.7.3 (fixed in 16.7.3)
  • Microsoft Windows 10: affected versions not specified; version 1607 only; version 1709 only; version 1803 only; version 1809 only; version 1903 only; …
  • Microsoft Windows Server 2016: affected versions not specified; version 1903 only; version 1909 only; version 2004 only
  • Microsoft Windows Server 2019: affected versions not specified

Published 2020-09-11. Last modified 2026-06-17.