Microsoft Defender Security Feature Bypass Vulnerability

🗓️ 10 Dec 2019 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 25 Views

Microsoft Defender Security Feature Bypass Vulnerability, addresses buffer handling issue

Reporter	Title	Published	Views	Family All 44
BDU FSTEC	The vulnerability of Microsoft Windows Defender operating system allows attackers to trigger false alerts and incorrect Windows Defender service responses.	17 Dec 201900:00	–	bdu_fstec
CVE	CVE-2019-1488	10 Dec 201921:41	–	cve
Cvelist	CVE-2019-1488	10 Dec 201921:41	–	cvelist
EUVD	EUVD-2019-10045	7 Oct 202500:30	–	euvd
Microsoft KB	December 10, 2019—KB4530681 (OS Build 10240.18427)	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530684 (OS Builds 18362.535 and 18363.535) - EXPIRED	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530689 (OS Build 14393.3384)	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530691 (Monthly Rollup)	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530692 (Security-only update)	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530695 (Monthly Rollup)	10 Dec 201908:00	–	mskb

Vulners

Node

microsoft windows_server,_version_1909_(server_core_installation)

OR

microsoft windows_10_version_1909_for_arm64-based_systems

OR

microsoft windows_10_version_1909_for_x64-based_systems

OR

microsoft windows_10_version_1909_for_32-bit_systems

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

29 Jan 2020 08:00Current

2.5Low risk

Vulners AI Score2.5

CVSS 22.1

CVSS 3.13.3

CVSS 33.3

EPSS0.00803

microsoft defender security feature bypass vulnerability buffer handling