Windows Defender For Endpoint CVEs and Security Vulnerabilities

CVE-2022-29800

networkd-dispatcher: Time-of-check-time-of-use (TOCTOU) race condition

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

CVSS 3.1 · 4.7 Medium EPSS 7.2% KEV · Not listed

Vendors

Microsoft

Products

Windows Defender For Endpoint

CVE-2022-29799

networkd-dispatcher: Directory traversal

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

CVSS 3.1 · 5.5 Medium EPSS 11.8% KEV · Not listed