Skip to content
OpenAdvisories
High MSRC-CVE-2024-21315 1 CVE

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

Published Feb 20, 2024 · Updated Feb 20, 2024

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Security updates
10.0.17763.5122 — https://support.microsoft.com/help/5032196
10.0.20348.2113 — https://support.microsoft.com/help/5032198
6.2.9200.24569 — https://support.microsoft.com/help/5032247
10.0.22000.2600 — https://support.microsoft.com/help/5032192
10.0.19041.3693 — https://support.microsoft.com/help/5032189
10.0.10240.20308 — https://support.microsoft.com/help/5032199
10.0.14393.6452 — https://support.microsoft.com/help/5032197
6.3.9600.21813 — https://support.microsoft.com/help/5034819
10.0.22631.2715 — https://support.microsoft.com/help/5032190
10.0.25398.531 — https://support.microsoft.com/help/5032202
6.2.9200.24710 — https://support.microsoft.com/help/5034830

Vulnerabilities 1

Revision history

  1. #1

    Information published. This CVE was addressed by updates that were released in November 2023, but the CVE was inadvertently omitted from the November 2023 Security Updates. Microsoft strongly recommends that customers running affected versions of Microsoft Defender for Endpoint Protection install the November 2023 updates to be protected from this vulnerability.

References