PT-2022-1775 · Microsoft · Windows Defender

Published

2022-01-12

·

Updated

2022-01-12

CVSS v2.0

6.6

Medium

VectorAV:L/AC:L/Au:N/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions Windows Defender (affected versions not specified)
Description The issue is related to an information disclosure in an error region of data in Windows Defender, part of the Windows operating system. Exploitation of this issue could allow an attacker to determine which areas of the file system are excluded from Windows Defender scanning and write arbitrary files.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2022-01075

Affected Products

Windows Defender