Elevation of Privilege Vulnerability in Microsoft Defender
CVE-2020-1002

7.1HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Forefront Endpoint Protection
Microsoft System Center
Microsoft Security Essentials
Windows Defender On Windows 10 Version 1909 For 32-bit Systems
Vendor
CVE Published:
15 April 2020

What is CVE-2020-1002?

An elevation of privilege vulnerability in the Microsoft Defender's MpSigStub.exe could allow attackers to delete files from arbitrary locations on the system. This vulnerability requires that an attacker has already logged into the system, making it a significant risk for system integrity. Proper safeguards and patch management are crucial to mitigating the impact of such vulnerabilities.

Affected Version(s)

Microsoft Forefront Endpoint Protection 2010

Microsoft Security Essentials = unspecified

Microsoft System Center Endpoint Protection

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.