An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
CVE-2020-1002
CVSS base score
7.1 (v3.1)
Severity
HIGH
Attack vector
Local
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Affected products
microsoft windows defender
microsoft forefront endpoint protection 2010
microsoft security essentials
microsoft system center endpoint protection
References
- portal.msrc.microsoft.com Patch, Vendor Advisory
- portal.msrc.microsoft.com Patch, Vendor Advisory