Get Permission
Microsoft has patched a 12-year-old vulnerability in Microsoft Defender that, if exploited, could enable nonadministrative users to escalate privileges in the application. The patch was made after security firm SentinelOne recently notified Microsoft about the flaw.
The vulnerability, tracked as CVE-2021-24092, is a driver flaw in Microsoft Defender, formerly known as Windows Defender, which is the company's anti-spyware application for its operating systems.
The driver flaw has been present in Microsoft Defender versions starting in 2009, SentinelOne says in a new report. But the vulnerability, which is not considered severe, has not been exploited in the wild, the security firm says.