CVE-2020-1133: Microsoft Visual Studio

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles file operations.</p>

Affected products

  • Microsoft Visual Studio: version 2015 only
  • Microsoft Visual Studio 2017: from 15.0, before 15.9.27 (fixed in 15.9.27)
  • Microsoft Visual Studio 2019: from 16.0, before 16.4.13 (fixed in 16.4.13); from 16.5, before 16.7.3 (fixed in 16.7.3)
  • Microsoft Windows 10: affected versions not specified; version 1607 only; version 1709 only; version 1803 only; version 1809 only; version 1903 only; …
  • Microsoft Windows Server 2016: affected versions not specified; version 1903 only; version 1909 only; version 2004 only
  • Microsoft Windows Server 2019: affected versions not specified

Published 2020-09-11. Last modified 2026-06-17.