Dashboard / CVE-2020-1002

CVE-2020-1002

HIGH
MEDIUM Priority: 0.05 BB Relevance: 39/100
Published: 2020-04-15 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: High
A: High

Description

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.

Affected Software (52)

VendorProductVersion
Microsoft Microsoft Forefront Endpoint Protection 2010
Microsoft Microsoft Security Essentials unspecified
Microsoft Microsoft System Center Endpoint Protection
Microsoft Microsoft System Center 2012 R2 Endpoint Protection
Microsoft Microsoft System Center 2012 Endpoint Protection
Microsoft Windows Defender on Windows 10 Version 1607 for 32-bit Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1607 for x64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1709 for 32-bit Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1709 for ARM64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1709 for x64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1803 for 32-bit Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1803 for ARM64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1803 for x64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1809 for 32-bit Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1809 for ARM64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1809 for x64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1903 for 32-bit Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1903 for ARM64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1903 for x64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1909 for 32-bit Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1909 for ARM64-based Systems unspecified
Microsoft Windows Defender on Windows 10 Version 1909 for x64-based Systems unspecified
Microsoft Windows Defender on Windows 10 for 32-bit Systems unspecified
Microsoft Windows Defender on Windows 10 for x64-based Systems unspecified
Microsoft Windows Defender on Windows 7 for 32-bit Systems Service Pack 1
Microsoft Windows Defender on Windows 7 for x64-based Systems Service Pack 1
Microsoft Windows Defender on Windows 8.1 for 32-bit systems unspecified
Microsoft Windows Defender on Windows 8.1 for x64-based systems unspecified
Microsoft Windows Defender on Windows RT 8.1 unspecified
Microsoft Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Showing 30 of 52 entries

References & Advisories (1)

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS — Exploitation Probability

0.74%
Raw Score 0.007370
Percentile 54.6%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00737
2026-11-04
0.00737
2026-11-03
0.00737
2026-11-02
0.00711

Intelligence Sources

mitre ref →
nvd ref →

External Links