CVE-2020-1002
At a glance Severity Not available EPSS EPSS 0.71 % · percentile 53 (2026-10-27) State PUBLISHED Published 2020-04-15 Updated 2024-08-04 Assigner microsoft NVD status Modified Description An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 6.6 AV:L/AC:L/Au:N/C:N/I:C/A:C NVD · nvd@nist.gov (Primary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:forefront_endpoint_protection_2010:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:system_center_endpoint_protection:*:*:*:*:*:*:*:*cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:-:*:*:*:*:*:*cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*Affected products
References
Sources
