Vulnerability · Published Feb 25, 2021 · Assigned by microsoft

CVE-2021-24092Microsoft Defender Elevation of Privilege Vulnerability

High 7.8

In plain English

A high-severity security flaw in Microsoft Endpoint Protection from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.6%top 50.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

Microsoft Defender Elevation of Privilege Vulnerability

Affected products (as reported)

Vendor	Product	Versions
Microsoft	Microsoft Endpoint Protection	N/A
Microsoft	Microsoft System Center Endpoint Protection	N/A
Microsoft	Microsoft System Center 2012 R2 Endpoint Protection	N/A
Microsoft	Microsoft Security Essentials	N/A
Microsoft	Microsoft System Center 2012 Endpoint Protection	N/A
Microsoft	Windows Defender	N/A

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24092 x_refsource_MISC