PT-2012-1246 · Microsoft · Windows Defender

Filip Dragović · Published 2012-08-08 · Updated 2026-04-06 · CVE-2023-38175

Positive Technologies · (AI Summary)

CVSS v3.1

7.8

High

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows Defender (affected versions not specified)

Description A flaw exists in Microsoft Windows Defender related to insufficient access control restrictions. Successful exploitation could allow an attacker to gain elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-264

CWE-59

Related Identifiers

BDU:2023-04624

CVE-2023-38175

Affected Products

Windows Defender

References · 8

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38175 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-38175 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38175 · Security Note
• https://bdu.fstec.ru/vul/2023-04624 · Security Note
• https://twitter.com/SOSIntel/status/2041139255859109968 · Twitter Post
• https://twitter.com/CVEnew/status/1688971805535662081 · Twitter Post
• https://twitter.com/CVEnew/status/1689198249041666048 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2023080860 · Note