Sin puntuación

CVE-2020-1163

Microsoft Microsoft Forefront Endpoint Protection; Microsoft Microsoft System Center; Microsoft Microsoft Security Essentials; Microsoft Windows Defender on Wi… Publicada: 2020-06-09 22:43 (hace 6 años)

Descripción

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1170.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
Microsoft	Microsoft Forefront Endpoint Protection	2010
Microsoft	Microsoft Security Essentials	unspecified
Microsoft	Microsoft System Center	Endpoint Protection, 2012 R2 Endpoint Protection, 2012 Endpoint Protection
Microsoft	Windows Defender on Windows 10 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 7 for 32-bit Systems	Service Pack 1
Microsoft	Windows Defender on Windows 7 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows 8.1 for 32-bit systems	unspecified
Microsoft	Windows Defender on Windows 8.1 for x64-based systems	unspecified
Microsoft	Windows Defender on Windows RT 8.1	unspecified
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems (Server Core installation)	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for Itanium-Based Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems (Server Core installation)	Service Pack 1
Microsoft	Windows Defender on Windows Server 2012	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2012 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2016	unspecified
Microsoft	Windows Defender on Windows Server 2016 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2019	unspecified
Microsoft	Windows Defender on Windows Server 2019 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1803 (Server Core Installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1903 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1909 (Server Core installation)	unspecified

Referencias y parches

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1163

Puntuación CVSS

Aún sin puntuación. Aparecerá cuando la CNA, CISA o NVD la puntúen.

EPSS (probabilidad de explotación en 30 días)

0.89%

superior al 60 % de todas las CVE

Cronología

ID reservado2019-11-04
Publicada2020-06-09 22:43
Llegó a IP-DB2026-10-25 00:04
Última actualización2024-08-04 09:25

Asignada por (CNA): microsoft

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Microsoft Windows

7.5Alta

CVE-2026-118148 hace 18 horas

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

7.8Alta

CVE-2026-119382 hace 18 horas

Windows TPM Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

8.8Alta

CVE-2026-122475 hace 18 horas

Windows Storage Spaces Controller Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2; Microsoft Windows 11 Version 23H2; Microsoft Windows 11 Version 24H2; Microsoft Windows 11 Version 25H2

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

5.9Media

CVE-2026-122474 hace 18 horas

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.

7.8Alta

CVE-2026-122183 hace 18 horas

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

5.5Media

CVE-2026-122297 hace 18 horas

Windows Kernel Transaction Manager Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.