Description
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1002
Scores
CVSS v3
7.1
EPSS
0.0071
EPSS Percentile
49.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Details
Status
published
Products (5)
microsoft/forefront_endpoint_protection_2010
microsoft/security_essentials
microsoft/system_center_endpoint_protection
microsoft/system_center_endpoint_protection
2012 (2 CPE variants)
microsoft/windows_defender
Published
Apr 15, 2020
Tracked Since
Feb 18, 2026