PT-2020-2051 · Microsoft · Windows Defender

Zhiniang Peng · Published 2020-04-15 · Updated 2021-07-21 · CVE-2020-0835

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Defender (affected versions not specified)

Description An issue exists in the Windows Defender antimalware platform related to the improper handling of hard links, allowing for potential elevation of privilege. This could enable an attacker to increase their privileges. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2020-01738

CVE-2020-0835

Affected Products

Windows Defender

References · 4

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0835 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01738 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-0835 · Security Note
• https://t.me/cibsecurity/11266 · Telegram Post