Rewterz Threat Advisory – CVE-2019-1255 – Microsoft Defender Denial of Service Vulnerability

Severity

Medium

Analysis summary

A denial of service vulnerability exists when Microsoft Defender improperly handles files. An attacker could exploit the vulnerability to prevent legitimate accounts from executing legitimate system binaries.

To exploit the vulnerability, an attacker would first require execution on the victim system.

Impact

Denial of service

Affected Vendors

Microsoft

Affected Products

Microsoft Defender

Remediation

Malware Protection Engine comes with an auto-update feature that will automatically install the newly patched version within 48 hours of its availability.