Puansız

CVE-2020-1461

Microsoft Microsoft Forefront Endpoint Protection; Microsoft Microsoft System Center; Microsoft Microsoft Security Essentials; Microsoft Windows Defender on Wi… Yayım: 2020-07-15 01:54 (6 yıl önce)

Açıklama

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Microsoft	Microsoft Forefront Endpoint Protection	2010
Microsoft	Microsoft Security Essentials	unspecified
Microsoft	Microsoft System Center	Endpoint Protection, 2012 R2 Endpoint Protection, 2012 Endpoint Protection
Microsoft	Windows Defender on Windows 10 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1607 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1709 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1803 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1809 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1903 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for 32-bit Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for ARM64-based Systems	unspecified
Microsoft	Windows Defender on Windows 10 Version 1909 for x64-based Systems	unspecified
Microsoft	Windows Defender on Windows 7 for 32-bit Systems	Service Pack 1
Microsoft	Windows Defender on Windows 7 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows 8.1 for 32-bit systems	unspecified
Microsoft	Windows Defender on Windows 8.1 for x64-based systems	unspecified
Microsoft	Windows Defender on Windows RT 8.1	unspecified
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for 32-bit Systems (Server Core installation)	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 for Itanium-Based Systems	Service Pack 2
Microsoft	Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems	Service Pack 1
Microsoft	Windows Defender on Windows Server 2008 R2 for x64-based Systems (Server Core installation)	Service Pack 1
Microsoft	Windows Defender on Windows Server 2012	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2	unspecified
Microsoft	Windows Defender on Windows Server 2012 R2 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2012 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2016	unspecified
Microsoft	Windows Defender on Windows Server 2016 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server 2019	unspecified
Microsoft	Windows Defender on Windows Server 2019 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1803 (Server Core Installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1903 (Server Core installation)	unspecified
Microsoft	Windows Defender on Windows Server, version 1909 (Server Core installation)	unspecified

Kaynaklar ve yamalar

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1461

CVSS puanı

Henüz puanlanmadı. CNA, CISA veya NVD puan verdiğinde burada görünür.

EPSS (30 günde istismar olasılığı)

0.75%

tüm CVE'lerin %55'inden yüksek

Zaman çizelgesi

Numara ayrıldı2019-11-04
Yayımlandı2020-07-15 01:54
IP-DB'ye ulaştı2026-10-25 00:05
Son güncelleme2024-08-04 09:39

Numarayı veren (CNA): microsoft

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Microsoft Windows

7.5Yüksek

CVE-2026-118148 1 saat önce

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

7.8Yüksek

CVE-2026-119382 1 saat önce

Windows TPM Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

8.8Yüksek

CVE-2026-122475 1 saat önce

Windows Storage Spaces Controller Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2; Microsoft Windows 11 Version 23H2; Microsoft Windows 11 Version 24H2; Microsoft Windows 11 Version 25H2

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

5.9Orta

CVE-2026-122474 1 saat önce

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.

7.8Yüksek

CVE-2026-122183 1 saat önce

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

5.5Orta

CVE-2026-122297 1 saat önce

Windows Kernel Transaction Manager Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.