Elevation of Privilege Vulnerability Affects Microsoft Defender for Endpoint Protection
CVE-2024-21315

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Microsoft Defender For Endpoint For Windows
Vendor
CVE Published:
13 February 2024

Summary

An elevation of privilege vulnerability exists in Microsoft Defender for Endpoint Protection, which allows an attacker to gain elevated access to the system. This flaw can lead to unauthorized actions being taken by malicious users, compromising system security and user data. Patching is essential to mitigate any potential exploitation risks associated with this vulnerability.

Affected Version(s)

Microsoft Defender for Endpoint for Windows Windows 10 Version 1809 for 32-bit Systems 1.0.0.0 < 10.0.17763.5122

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

EPSS Score

0% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.