7.8

CVE-2024-21315

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.25398.531
   Microsoft ≫ Windows Server 2022 23h2 Version -
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.19045.3693
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform x64
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.22621.2715
   Microsoft ≫ Windows 11 22h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 11 23h2 Version - HwPlatform arm64
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 6.3.9600.21813
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.14393.6452
   Microsoft ≫ Windows 10 1607 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1607 Version - HwPlatform x86
   Microsoft ≫ Windows Server 2016 Version -
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 6.2.9200.24710
   Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.19045.3693
   Microsoft ≫ Windows 10 22h2 Version - HwPlatform x86
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.22621.2715
   Microsoft ≫ Windows 11 22h2 Version - HwPlatform x64
   Microsoft ≫ Windows 11 23h2 Version - HwPlatform x64
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.10240.20308
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x86
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.19043.3693
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform x64
   Microsoft ≫ Windows 10 21h2 Version - HwPlatform x86
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.22000.2600
   Microsoft ≫ Windows 11 21h2 Version - HwPlatform arm64
   Microsoft ≫ Windows 11 21h2 Version - HwPlatform x64
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 6.2.9200.24569
   Microsoft ≫ Windows Server 2022 Version -
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.20348.2113
   Microsoft ≫ Windows Server 2022 Version -
Microsoft ≫ Defender For Endpoint SwPlatform windows Version < 10.0.17763.5122
   Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
   Microsoft ≫ Windows Server 2019 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.463
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Microsoft 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21315
Patch
Vendor Advisory