Microsoft Defender Elevation of Privilege Vulnerability
CVE-2021-24092

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Endpoint Protection
Microsoft System Center Endpoint Protection
Microsoft System Center 2012 R2 Endpoint Protection
Microsoft Security Essentials
Vendor
CVE Published:
25 February 2021

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2021-24092?

Microsoft Defender Elevation of Privilege Vulnerability

Affected Version(s)

Microsoft Endpoint Protection Unknown

Microsoft Security Essentials Unknown

Microsoft System Center 2012 Endpoint Protection Unknown

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2021-24092
Created by HORKimhab

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.