Unscored

CVE-2020-1163

Microsoft Microsoft Forefront Endpoint Protection; Microsoft Microsoft System Center; Microsoft Microsoft Security Essentials; Microsoft Windows Defender on Wi… Published: 2020-06-09 22:43 (6 years ago)

Description

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1170.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Microsoft	Microsoft Forefront Endpoint Protection	2010
Microsoft	Microsoft Security Essentials	unspecified
Microsoft	Microsoft System Center	Endpoint Protection, 2012 R2 Endpoint Protection, 2012 Endpoint Protection
Microsoft	Windows Defender on Windows 10 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 7 for 32-bit Systems	Service Pack 1
Microsoft	Windows Defender on Windows 7 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows 8.1 for 32-bit systems	unspecified
Microsoft	Windows Defender on Windows 8.1 for x64-based systems	unspecified
Microsoft	Windows Defender on Windows RT 8.1	unspecified
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems (Server Core installation)	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for Itanium-Based Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems (Server Core installation)	Service Pack 1
Microsoft	Windows Defender on Windows Server 2012	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2012 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2016	unspecified
Microsoft	Windows Defender on Windows Server 2016 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2019	unspecified
Microsoft	Windows Defender on Windows Server 2019 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1803 (Server Core Installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1903 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1909 (Server Core installation)	unspecified

References and patches

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1163

CVSS score

Not scored yet. It appears here once the CNA, CISA or NVD scores it.

EPSS (chance of exploitation in 30 days)

0.89%

higher than 60% of all CVEs

Timeline

ID reserved2019-11-04
Published2020-06-09 22:43
Reached IP-DB2026-10-25 00:04
Last updated2024-08-04 09:25

Assigned by (CNA): microsoft

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Microsoft Windows

7.5High

CVE-2026-118148 2 days ago

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

7.8High

CVE-2026-119382 2 days ago

Windows TPM Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

8.8High

CVE-2026-122475 2 days ago

Windows Storage Spaces Controller Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2; Microsoft Windows 11 Version 23H2; Microsoft Windows 11 Version 24H2; Microsoft Windows 11 Version 25H2

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

5.9Medium

CVE-2026-122474 2 days ago

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.

7.8High

CVE-2026-122183 2 days ago

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

5.5Medium

CVE-2026-122297 2 days ago

Windows Kernel Transaction Manager Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.