Lucene search
+L

929 matches found

Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.3 views

PT-2025-36879

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue exists within the Windows Defender Firewall Service. This flaw enables a locally authenticated attacker to gain elevated privileges on the...

6.8CVSS6.2AI score0.00482EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.8 views

Microsoft Windows Defender 安全漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Window...

6.7CVSS6.2AI score0.00467EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.7 views

PT-2025-36837

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue in the Windows Defender Firewall Service can allow a locally authorized attacker to elevate privileges. This issue allows attackers to affec...

6.7CVSS6.1AI score0.00467EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.16 views

Microsoft Windows Defender 安全漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Window...

6.7CVSS6.2AI score0.00467EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.8 views

Microsoft Windows Defender 安全漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Window...

6.7CVSS6.2AI score0.00499EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.9 views

Microsoft Windows Defender 安全漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Window...

6.7CVSS6.2AI score0.00482EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.5 views

PT-2025-36851

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue in the Windows Defender Firewall Service can allow a locally authorized attacker to elevate privileges. This issue allows attackers to affec...

6.8CVSS6.1AI score0.00467EPSS
SaveExploits0References7
NVD
NVD
added 2025/09/08 3:15 p.m.19 views

CVE-2025-59033

The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...

7.4CVSS0.00238EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/08 3:15 p.m.15 views

CVE-2022-50238

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...

7.4CVSS0.00237EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/08 12:00 a.m.8 views

Microsoft Windows Defender Application Control 安全漏洞

Microsoft Windows Defender Application Control WDAC is a security tool from Microsoft Corporation USA that restricts the operation of programs at the software level by configuring policies to reduce the scope of what hackers can attack. A security vulnerability exists in Microsoft Windows Defende...

7.4CVSS6.4AI score0.00238EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/09/08 12:00 a.m.21 views

CVE-2022-50238

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...

7.4CVSS0.00237EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/08 12:00 a.m.10 views

Microsoft Windows Defender Application Control 安全漏洞

Microsoft Windows Defender Application Control WDAC is a security tool from Microsoft Corporation USA that restricts the operation of programs at the software level by configuring policies to reduce the scope of what hackers can attack. A security vulnerability exists in Microsoft Windows Defende...

7.4CVSS6.5AI score0.00237EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/09/08 12:00 a.m.21 views

CVE-2025-59033

The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...

7.4CVSS0.00238EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/08 12:00 a.m.14 views

PT-2025-36478

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: The Microsoft vulnerable driver block list, implemented as Windows Defender Application Control WDAC policy, does not properly block entries specifying the signing certificate’s TB...

7.4CVSS6.3AI score0.00238EPSS
SaveExploits0References12
OSV
OSV
added 2025/09/04 5:48 p.m.4 views

BIT-POWERSHELL-2020-0951 Windows Defender Application Control Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows Defender Application Control WDAC which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by WDAC. To exploit the...

7.2CVSS7.1AI score0.07037EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/01 12:00 a.m.9 views

The vulnerability of Windows Defender Application Control on Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of Windows Defender Application Control WDAC on Windows operating systems is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow a hacker to circumvent existing security restrictions...

5.1CVSS5.5AI score0.00288EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.16 views

The vulnerability of Microsoft Windows Defender for Identity allows a perpetrator to perform a substitution through the neighboring network.

The vulnerability of Microsoft Windows Defender operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to perform substitution attacks through the neighboring network...

6.5CVSS8.1AI score0.007EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:10 p.m.10 views

CVE-2020-1170

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS6.6AI score0.01608EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:50 p.m.11 views

CVE-2020-0835

An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability'...

7.8CVSS7AI score0.00914EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:32 p.m.4 views

CVE-2020-0762

An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Defender Security Center Elevation of Privilege Vulnerability'. This CVE ID is...

7.8CVSS6.5AI score0.00838EPSS
SaveExploits0References1
Rows per page
Query Builder