CVE-2021-1647: high-severity vulnerability in Microsoft Security Essentials
Microsoft Defender Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A security flaw in Microsoft Defender allows an attacker to run malicious code on a computer without permission. This is dangerous because Defender is supposed to protect your system, not be a way for attackers to compromise it.
A remote code execution vulnerability in Microsoft Defender allows an attacker to execute arbitrary code with elevated privileges through a network vector or local exploitation path. The vulnerability requires specific preconditions but can lead to complete system compromise once the code is executed.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.