Security Updates for Windows Defender (April 2020)

The engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.2001.112. It is, therefore, affected by a hard link elevation of privilege vulnerability which could allow an attacker who successfully exploited this vulnerability to elevate privileges on the...

CVE-2020-0835

An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability'...

CVE-2020-0835

CVE-2020-0835 affects Microsoft Windows Defender Antimalware Platform. The root cause is improper handling of hard links in the Defender engine, enabling local elevation of privilege when a user runs a crafted program on affected systems. Public sources note the vulnerability exists in Defender a...