CVE-2018-0952
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 6.2%
from disclosure to weapon6 days
Published on NVDAug 15
1st PoC+6d
exploitation probability
6.2%top 7% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.
Affected products
Microsoft · Microsoft Visual StudioMicrosoft · Windows 10Microsoft · Windows 10 ServersMicrosoft · Windows Server 2016public PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45244githubgithub.com/atredispartners/CVE-2018-0952-SystemCollector★ 110cve_referencewww.exploit-db.com/exploits/45244/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.