Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-90797)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation-of-privilege vulnerability exists in Microsoft Windows/Windows Server, which stems from a failure of the Diagnostic Center Standard Collector to properly handle file operations and could be exploited by an attacker running a specially crafted application to run processes in a privileged environment.