Title

Microsoft Windows Defender Privilege Escalation Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Microsoft Windows Defender. To exploit this vulnerability, an attacker would gain access to an affected system and place a malicious application on the root drive. When Windows Defender initiates the signature update process, the malicious application will execute. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code with system level privileges resulting in the complete compromise of the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-39210

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.