Description:
A researcher has published a proof-of-concept (PoC) exploit code for a critical vulnerability (known as "RedSun") in Microsoft Windows Defender. This vulnerability could allow a local attacker to gain SYSTEM privilege on systems where Microsoft Windows Defender is enabled.
Reports indicated that the proof-of-concept (PoC) exploit code is publicly available for an elevation of privilege vulnerability and it is at high risk of exploitation. System administrators are advised to follow the recommendations provided by the vendors to mitigate the elevated risk of cyber attacks.
Affected Systems:
- Microsoft Windows 10, 11 with Microsoft Defender enabled
- Microsoft Windows Server with Microsoft Defender enabled
Impact:
Successful exploitation of the vulnerability could lead to elevation of privilege on an affected system.
Recommendation:
System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
More Information:
- https://github.com/Nightmare-Eclipse/RedSun
