CVE-2019-1161

Microsoft Defender Elevation of Privilege Vulnerability

State
Published
Severity
Not scored
Published
Aug 14, 2019
Updated
Aug 4, 2024
Reserved
Nov 26, 2018

Read the record on cve.org

Description

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted command that could exploit the vulnerability and delete protected files on an affected system once MpSigStub.exe ran again. The update addresses the vulnerability and blocks the arbitrary deletion.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Microsoft Forefront Endpoint Protection 2010Microsoft
  • N/AAffected
Microsoft System Center Endpoint ProtectionMicrosoft
  • N/AAffected
Microsoft System Center 2012 R2 Endpoint ProtectionMicrosoft
  • N/AAffected
Microsoft Security EssentialsMicrosoft
  • N/AAffected
Microsoft System Center 2012 Endpoint ProtectionMicrosoft
  • N/AAffected
Windows DefenderMicrosoft
  • N/AAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.