CVE-2022-23278 — Microsoft Defender FOR Endpoint EDR Sensor vulnerability

3 documents3 sources
Severity
5.9MEDIUMNVD
EPSS
2.7%
top 14.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Microsoft Defender FOR Endpoint EDR SensorMicrosoft Defender FOR Endpoint FOR AndroidMicrosoft Defender FOR Endpoint FOR IOS+5 more
Timeline
PublishedMar 9
Latest updateMar 10

Description

Microsoft Defender for Endpoint Spoofing Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages8 packages

▶CVEListV5microsoft/microsoft_defender_for_endpoint_for_ios1.0.0.0 — 1.1.18090109
▶CVEListV5microsoft/microsoft_defender_for_endpoint_for_mac101.0.0 — 101.60.91
▶CVEListV5microsoft/microsoft_defender_for_endpoint_edr_sensor1.0.0.0 — 10.8047.22439
▶CVEListV5microsoft/microsoft_defender_for_endpoint_for_android1.0.0.0 — 1.0.3011.0302

🔴Vulnerability Details

1
GHSA
GHSA-fwqp-wm97-mvcp: Microsoft Defender for Endpoint Spoofing Vulnerability↗2022-03-10
▶

📋Vendor Advisories

1
Microsoft
Microsoft Defender for Endpoint Spoofing Vulnerability↗2022-03-08
▶