CVE-2023-23389
published 2023-03-14CVE-2023-23389: Microsoft Defender Elevation of Privilege Vulnerability
PriorityP428medium6.3CVSS 3.1
AVLACHPRLUINSUCNIHAH
EPSS
0.26%
17.1th percentile
Microsoft Defender Elevation of Privilege Vulnerability
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | malware_protection_engine | — | — |
| microsoft | microsoft_malware_protection_engine | >= 1.1.0.0 < 1.1.20000.2 | 1.1.20000.2 |
| msrc | microsoft_malware_protection_engine | — | — |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
vendor_msrc6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Microsoft Defender Elevation of Privilege Vulnerability
vendor_msrc·2023-03-14·CVSS 6.3
CVE-2023-23389 [MEDIUM] CWE-367 Microsoft Defender Elevation of Privilege Vulnerability
Microsoft Defender Elevation of Privilege Vulnerability
FAQ:
References
Identification
Last version of the Microsoft Malware Protection Engine affected by this vulnerability
1.1.19900.2
First version of the Microsoft Malware Protection Engine with this vulnerability addressed
Version 1.1.20000.2
See Manage Updates Baselines Microsoft Defender Antivirus for more information.``
Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?
Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.
Why is no action required to install this update?
In res
GHSA
GHSA-fpmq-pvjx-5562: Microsoft Defender Elevation of Privilege Vulnerability
ghsa_unreviewed·2023-03-14
CVE-2023-23389 [MEDIUM] GHSA-fpmq-pvjx-5562: Microsoft Defender Elevation of Privilege Vulnerability
Microsoft Defender Elevation of Privilege Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-14
Published