Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution
You can find the full advisory here:
https://medium.com/@radimre83/the-trouble-with-microsofts-troubleshooters-6e32fc80b8bd