high7.8
CVE-2020-1170
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker w…
Impact
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1163.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Defender | All versions |
| Microsoft | Forefront Endpoint Protection 2010 | All versions |
| Microsoft | Security Essentials | All versions |
| Microsoft | System Center Endpoint Protection | Version 2012 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/160919/Cloud-Filter-Arbitrary-File-Creation-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1170
- http://packetstormsecurity.com/files/160919/Cloud-Filter-Arbitrary-File-Creation-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1170