CVE-2020-1170

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1163.

Affected

Microsoft · Microsoft Forefront Endpoint Protection · Microsoft System Center · Microsoft Security Essentials · Windows Defender on Windows 10 Version 1803 for 32-bit Systems · Windows Defender on Windows 10 Version 1803 for x64-based Systems · Windows Defender on Windows Server, version 1803 (Server Core Installation)

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.61% chance of exploitation in the next 30 days, 76th percentile

Published

2020-06-09

Updated

2024-08-04

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/160919/Cloud-Filter-Arbitrary-File-Creation-Privileg…

Security advisories

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1170

References

• CVE Record
• NVD entry