Exploit / PoCcriticalExploited in the wild

Microsoft Fixes Windows Defender Zero

Infosecurity Magazineby Phil MuncasterJan 13, 2021 · 11:20 UTC (Jan 13, 2021)1 min read2 · 1 read

Read at infosecurity-magazine.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-1647 CVE-2021-1648 CVE-2021-1666 CVE-2021-1709 CVE-2019-1458

Tags: cve-2021-1647 cve-2021-1648 cve-2021-1666 cve-2021-1709 cve-2019-1458 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-1458	Win32k Object-Handling Flaw Enables Local Privilege Escalation in Microsoft Windows	7.8	74%	KEVRansomwarePoC ×2	Dec 10, 2019 KEV Jan 10, 2022
CVE-2021-1647	Remote Code Execution Vulnerability in Microsoft Defender Antimalware Engine	7.8	40%	KEV	Jan 12, 2021 KEV Nov 3, 2021
CVE-2021-1666 +2 related CVEs CVE-2021-1648 CVE-2021-1709	Remote Procedure Call Runtime Remote Code Execution Vulnerability	8.8 group max	3%		Jan 12, 2021

From the original article

1 min read at infosecurity-magazine.com

Microsoft has patched a zero-day bug in Windows Defender being actively exploited in the wild, as part of its monthly update round. The first Patch Tuesday of 2021 featured fixes for 83 vulnerabilities in Windows OS, Edge, Office, Visual Studio, . Net Core, .

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.