CVE-2019-1255High

Microsoft Defender Elevation of Privilege Vulnerability

Published
September 23, 2019
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2019-1255 →

📋 Description

An elevation of privilege vulnerability exists when Microsoft Defender improperly handles files. An attacker could exploit the vulnerability to overwrite the discretionary access control list (DACL) for a file. To exploit the vulnerability, an attacker would first require execution on the victim system. The security update addresses the vulnerability by ensuring Microsoft Defender properly handles files.

🎯 Affected products45

  • Microsoft Forefront Endpoint Protection 2010
  • Microsoft Security Essentials
  • Microsoft System Center 2012 Endpoint Protection
  • Microsoft System Center 2012 R2 Endpoint Protection
  • Microsoft System Center Endpoint Protection
  • Windows Defender on Windows 10 Version 1607 for 32-bit Systems
  • Windows Defender on Windows 10 Version 1607 for x64-based Systems
  • Windows Defender on Windows 10 Version 1703 for 32-bit Systems
  • Windows Defender on Windows 10 Version 1703 for x64-based Systems
  • Windows Defender on Windows 10 Version 1709 for 32-bit Systems
  • Windows Defender on Windows 10 Version 1709 for ARM64-based Systems
  • Windows Defender on Windows 10 Version 1709 for x64-based Systems
  • Windows Defender on Windows 10 Version 1803 for 32-bit Systems
  • Windows Defender on Windows 10 Version 1803 for ARM64-based Systems
  • Windows Defender on Windows 10 Version 1803 for x64-based Systems
  • Windows Defender on Windows 10 Version 1809 for 32-bit Systems
  • Windows Defender on Windows 10 Version 1809 for ARM64-based Systems
  • Windows Defender on Windows 10 Version 1809 for x64-based Systems
  • Windows Defender on Windows 10 Version 1903 for 32-bit Systems
  • Windows Defender on Windows 10 Version 1903 for ARM64-based Systems
  • Windows Defender on Windows 10 Version 1903 for x64-based Systems
  • Windows Defender on Windows 10 for 32-bit Systems
  • Windows Defender on Windows 10 for x64-based Systems
  • Windows Defender on Windows 7 for 32-bit Systems Service Pack 1
  • Windows Defender on Windows 7 for x64-based Systems Service Pack 1
  • Windows Defender on Windows 8.1 for 32-bit systems
  • Windows Defender on Windows 8.1 for x64-based systems
  • Windows Defender on Windows RT 8.1
  • Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
  • Windows Defender on Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • +15 more not shown

🔗 References (1)