CVE-2021-24092

HIGH7.8Published on February 25, 2021

Microsoft Defender Elevation of Privilege Vulnerability

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-269

Vendorsmicrosoft

Affected products

Vendors	Prodotto	Versioni
microsoft	windows defender	-
microsoft	windows 10	-
microsoft	windows 7	-
microsoft	windows 8.1	-
microsoft	windows rt 8.1	-
microsoft	windows server 2008	-
microsoft	windows server 2012	-
microsoft	windows server 2016	-
microsoft	windows server 2019	-
microsoft	endpoint protection	-
microsoft	security essentials	-
microsoft	system center endpoint protection	-

BTR Reforged: Abusing Defender's driver to bypass Windows security. Requires admin access, affects Windows 7-11. Presented at Black Hat 2026.

This product uses the NVD API but is not endorsed or certified by the NVD.