Unscored severity · published Apr 9, 2013
CVE-2013-0078
The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WD
Windows Defender · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0078
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0078
US Government Resource
http://www.us-cert.gov/ncas/alerts/TA13-100A
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-034
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16293
More from Windows Defender
7.8
CVE-2021-1647
Microsoft Defender Remote Code Execution Vulnerability
7.8
CVE-2017-8540
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
8.8
CVE-2018-0986
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka…
7.8
CVE-2023-36422
Microsoft Windows Defender Elevation of Privilege Vulnerability
7.8
CVE-2023-38175
Microsoft Windows Defender Elevation of Privilege Vulnerability