CVE-2024-21315 — Vulnetix

CVE-2024-21315 PUBLISHED

Es existiert eine Schwachstelle in Microsoft Defender. Der Fehler ist noch nicht im Detail beschrieben. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien auf "SYSTEM" zu erweitern.

EPSS 0.28% · 51.8th percentile

Risk Scores

EPSS Score

0.28%

51.8th percentile

Affected Products

Vendor	Product	Versions
Microsoft	Microsoft Defender for Endpoint for Windows

Exploit Intelligence

CIRCL seen: CVE-2024-21315 (circl-sighting)
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability (circl)
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)

Timeline

Feb 13, 2024 CVE Published
Feb 13, 2024 PoC Published
Feb 14, 2024 EPSS Score
Mar 12, 2024 EPSS Score
Apr 8, 2024 EPSS Score
Jun 1, 2024 EPSS Score
Jun 28, 2024 EPSS Score
Jul 25, 2024 EPSS Score
Aug 21, 2024 EPSS Score
Sep 18, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Oct 17, 2024 Coalition ESS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0388.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0388 advisory
https://msrc.microsoft.com/update-guide advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21315 advisory

Open in Interactive Console →