← Back

CVE-2019-1161

nvd nist
Published: Aug 14, 2019Modified: Feb 20, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted command that could exploit the vulnerability and delete protected files on an affected system once MpSigStub.exe ran again. The update addresses the vulnerability and blocks the arbitrary deletion.

Affected (6)

4 products
Windows Defender
Security Essentials
System Center Endpoint Protection
Configuration A
1 vulnerable · 13 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Microsoft
Windows 10
All versions
Microsoft
Windows 10
Version 1607
Microsoft
Windows 10
Version 1703
Microsoft
Windows 10
Version 1709
Microsoft
Windows 7
All versions
Microsoft
Windows 8.1
All versions
Microsoft
Windows Rt 8.1
All versions
Microsoft
Windows Server 2008
All versions
Microsoft
Windows Server 2008
Version r2 sp1
Microsoft
Windows Server 2008
Version r2 sp1
Microsoft
Windows Server 2012
All versions
Microsoft
Windows Server 2012
Version r2
Microsoft
Windows Server 2016
All versions
Configuration B
5 vulnerable

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.