AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-3154

MEDIUM · CVSS 6.9 EPSS 1.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-07-10 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.9. It affects Microsoft, Windows.

CVE
CVE-2013-3154
Severity
MEDIUM
CVSS
6.9
EPSS
1.76%
Microsoft Windows

Original NVD Description

The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability."