Microsoft Malware Protection Engine Defender information disclosure

Summaryinfo

A vulnerability was found in Microsoft Malware Protection Engine. It has been rated as problematic. This issue affects some unknown processing of the component Defender. Performing a manipulation results in an unknown weakness. This vulnerability is known as CVE-2023-24934. Attacking locally is a requirement. Furthermore, an exploit is available. It is suggested to install a patch to address this issue.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Microsoft Malware Protection Engine (Anti-Malware Software) (version unknown). This affects an unknown function of the component Defender. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. The summary by CVE is:

Microsoft Defender Security Feature Bypass Vulnerability

The weakness was published 04/15/2023. The advisory is shared at msrc.microsoft.com. This vulnerability is uniquely identified as CVE-2023-24934 since 01/31/2023. Technical details are unknown but an exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

It is declared as proof-of-concept.

Applying a patch is able to eliminate this problem.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Anti-Malware Software

Vendor

• Microsoft

Name

• Malware Protection Engine

License

• commercial

Website

• Vendor: https://www.microsoft.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion