Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
CVE-2023-21809

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Defender Security Intelligence Updates
Vendor
CVE Published:
14 February 2023

What is CVE-2023-21809?

A security feature bypass vulnerability exists in Microsoft Defender for Endpoint, which could allow an attacker to exploit the affected software. This vulnerability highlights the importance of maintaining robust endpoint security measures, as attackers may leverage this weakness to bypass critical protective features.

Affected Version(s)

Microsoft Defender Security Intelligence Updates Unknown 1.0.0 < 1.379.200.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.