CVE-2021-24092

CVSS 3.1: 7.8 high
EPSS: <1%p44
Published: Feb 25, 2021 · Feb 25, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-24092 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Defender Elevation of Privilege Vulnerability

Vendors: microsoft

Products: windows defender, endpoint protection, security essentials, system center endpoint protection

Weakness: CWE-269

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

2 stories

Microsoft February 2021 Patch Tuesday fixes 56 bugs, including an actively exploited Windows zero

Security AffairsFeb 9, 22:27 UTC · Feb 9, 2021VulnerabilityExploitedCVE-2021-1732 CVE-2021-24078 CVE-2021-24074+487 · 1 read

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

Check Point revealed BTR Reforged, a technique weaponizing Microsoft Defender's built-in BTR.sys driver to delete security software at boot without exploiting any vulnerability.

The Hacker NewsAug 21, 15:52 UTC · Aug 21, 2026ToolsCVE-2021-240923 · 1 read