Microsoft Defender for Endpoint on Android Spoofing Vulnerability
CVE-2024-49057

8.1HIGH

Key Information:

Vendor
Microsoft
Status
Microsoft Defender For Endpoint For Android
Vendor
CVE Published:
12 December 2024

Summary

A spoofing vulnerability has been identified in Microsoft Defender for Endpoint on Android, affecting the security posture of the affected devices. This flaw allows an attacker to impersonate legitimate users, potentially leading to unauthorized access and security breaches. Users of Microsoft Defender for Endpoint on Android are strongly advised to apply security updates and patches as they become available to mitigate this risk.

Affected Version(s)

Microsoft Defender for Endpoint for Android Unknown 1.0.0.0 < 1.0.7128.0101

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.