KLA11537 Privilege escalation vulnerability in Microsoft Defender

Detect date:

08/13/2019

Severity:

High

Description:

An elevation of privilege vulnerability was found in Microsoft Defender. Malicious users can exploit this vulnerability via specially crafted command to gain privileges.

Affected products:

Microsoft System Center 2012 Endpoint Protection
Windows Defender
Microsoft Forefront Endpoint Protection 2010
Microsoft Security Essentials
Microsoft System Center Endpoint Protection
Microsoft System Center 2012 R2 Endpoint Protection

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2019-1161

Impacts:

PE

Related products:

Windows Defender

CVE-IDS:

CVE-2019-11616.6High

Microsoft official advisories: