CVE-2020-1163 : An elevation of privilege vulnerability exists in Windows Defender that leads ar

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1170.

Published 2020-06-09 20:15:13

Updated 2021-07-21 11:39:24

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Gain privilege

Products affected by CVE-2020-1163

Microsoft » Windows Defender » Version: N/A
cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: 1607
When used together with: Microsoft » Windows 10 » Version: 1709
When used together with: Microsoft » Windows 10 » Version: 1803
When used together with: Microsoft » Windows 10 » Version: 1809
When used together with: Microsoft » Windows 10 » Version: 1903
When used together with: Microsoft » Windows 10 » Version: 1909
When used together with: Microsoft » Windows 7 » Version: N/A Update SP1
When used together with: Microsoft » Windows 8.1 » Version: N/A
When used together with: Microsoft » Windows Rt 8.1 » Version: N/A
When used together with: Microsoft » Windows Server 2008 » Version: N/A Update SP2
When used together with: Microsoft » Windows Server 2008 » Version: R2 Update SP1 For Itanium
When used together with: Microsoft » Windows Server 2008 » Version: R2 Update SP1 For X64
When used together with: Microsoft » Windows Server 2012 » Version: N/A
When used together with: Microsoft » Windows Server 2012 » Version: R2
When used together with: Microsoft » Windows Server 2016 » Version: N/A
When used together with: Microsoft » Windows Server 2016 » Version: 1803
When used together with: Microsoft » Windows Server 2016 » Version: 1903
When used together with: Microsoft » Windows Server 2016 » Version: 1909
When used together with: Microsoft » Windows Server 2019 » Version: N/A
Microsoft » Security Essentials » Version: N/A
cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Forefront Endpoint Protection 2010 » Version: N/A
cpe:2.3:a:microsoft:forefront_endpoint_protection_2010:-:*:*:*:*:*:*:*
Matching versions
Microsoft » System Center Endpoint Protection » Version: 2012 Update R2
cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*
Matching versions
Microsoft » System Center Endpoint Protection » Version: 2012
cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-1163

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 7 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-1163

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2020-1163

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1163

CVE-2020-1163 | Microsoft Windows Defender Elevation of Privilege Vulnerability
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-1163

Products affected by CVE-2020-1163

Exploit prediction scoring system (EPSS) score for CVE-2020-1163

CVSS scores for CVE-2020-1163

References for CVE-2020-1163