Ohne Score

CVE-2020-1170

Microsoft Microsoft Forefront Endpoint Protection; Microsoft Microsoft System Center; Microsoft Microsoft Security Essentials; Microsoft Windows Defender on Wi… Veröffentlicht: 2020-06-09 22:43 (vor 6 Jahren)

Beschreibung

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1163.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Microsoft	Microsoft Forefront Endpoint Protection	2010
Microsoft	Microsoft Security Essentials	unspecified
Microsoft	Microsoft System Center	Endpoint Protection, 2012 R2 Endpoint Protection, 2012 Endpoint Protection
Microsoft	Windows Defender on Windows 10 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 7 for 32-bit Systems	Service Pack 1
Microsoft	Windows Defender on Windows 7 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows 8.1 for 32-bit systems	unspecified
Microsoft	Windows Defender on Windows 8.1 for x64-based systems	unspecified
Microsoft	Windows Defender on Windows RT 8.1	unspecified
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems (Server Core installation)	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for Itanium-Based Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems (Server Core installation)	Service Pack 1
Microsoft	Windows Defender on Windows Server 2012	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2012 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2016	unspecified
Microsoft	Windows Defender on Windows Server 2016 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2019	unspecified
Microsoft	Windows Defender on Windows Server 2019 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1803 (Server Core Installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1903 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1909 (Server Core installation)	unspecified

Referenzen und Patches

CVSS-Score

Noch nicht bewertet. Erscheint hier, sobald CNA, CISA oder NVD bewerten.

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

1.61%

höher als 76 % aller CVEs

Zeitverlauf

ID reserviert2019-11-04
Veröffentlicht2020-06-09 22:43
Bei IP-DB eingegangen2026-10-25 00:05
Zuletzt aktualisiert2024-08-04 09:25

Vergeben von (CNA): microsoft

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Microsoft Windows

7.5Hoch

CVE-2026-118148 vor 23 Stunden

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

7.8Hoch

CVE-2026-119382 vor 23 Stunden

Windows TPM Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

8.8Hoch

CVE-2026-122475 vor 23 Stunden

Windows Storage Spaces Controller Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2; Microsoft Windows 11 Version 23H2; Microsoft Windows 11 Version 24H2; Microsoft Windows 11 Version 25H2

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

5.9Mittel

CVE-2026-122474 vor 23 Stunden

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.

7.8Hoch

CVE-2026-122183 vor 23 Stunden

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

5.5Mittel

CVE-2026-122297 vor 23 Stunden

Windows Kernel Transaction Manager Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.