PT-2012-1246 · Microsoft · Windows Defender

Filip Dragović · Published 2012-08-08 · Updated 2026-04-06 · CVE-2023-38175

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows Defender (affected versions not specified)

Description The Windows Defender component contains flaws in access control. Successful exploitation of this issue could allow an attacker to gain elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

CWE-264

Related Identifiers

BDU:2023-04624

CVE-2023-38175

Affected Products

Windows Defender

References · 8

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38175 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-38175 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38175 · Security Note
• https://bdu.fstec.ru/vul/2023-04624 · Security Note
• https://twitter.com/CVEnew/status/1688971805535662081 · Twitter Post
• https://twitter.com/CVEnew/status/1689198249041666048 · Twitter Post
• https://twitter.com/SOSIntel/status/2041139255859109968 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2023080860 · Note