CVE-2021-1647
Microsoft Defender Remote Code Execution Vulnerability
In short
A security flaw in Microsoft Defender allows an attacker to run malicious code on a computer without permission. This is dangerous because Defender is supposed to protect your system, not be a way for attackers to compromise it.
Technical detail
A remote code execution vulnerability in Microsoft Defender allows an attacker to execute arbitrary code with elevated privileges through a network vector or local exploitation path. The vulnerability requires specific preconditions but can lead to complete system compromise once the code is executed.
Summary generated and translated by AI from the official description.
Microsoft Defender Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected products
Microsoft · Microsoft Security EssentialsMicrosoft · Microsoft System Center 2012 Endpoint ProtectionMicrosoft · Microsoft System Center 2012 R2 Endpoint ProtectionMicrosoft · Microsoft System Center Endpoint ProtectionMicrosoft · Windows Defenderpublic PoCs found — 1
githubgithub.com/findcool/cve-2021-1647★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →