This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 64%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZ%3C/text%3E%3C/svg%3E)
Its regarding these 2 cve Elevation of privilege vulnerability for windows defender CVE-2020-1163 and CVE-2020-1170. The vulnerability involves elevation of privilege vulnerability that can result in Microsoft Defender deleting files on the Windows system
We tried the KB4052623 for windows server platform, but some exe, failed to run, I am not even sure that is for windows server forum
https://support.microsoft.com/en-us/help/4052623/update-for-microsoft-defender-antimalware-platform
Updating via internet is not an option, as these windows servers are not supposed to connect to the Internet.
We have considered removing Windows Defender.
Please advise . Thanks.
@z080236
Hi,
Did you mean you cannot apply the KB4052623? When did this appear and what's the detailed error message?
This update is available for Windows Server 2019 and Windows Server 2016.
Microsoft Defender Antivirus uses cloud-delivered protection. Cloud-delivered protection is always on and requires an active connection to the Internet to function.
I suggest you use Windows Defender when connect to the Internet.
Hope above information can help you.
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
internet connection is not possible in my environment. applying this KB has many exe, pls refer to here
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4052623
I have run the exe ,
updateplatform_19608225e67d613b65e183e1ca4159bc915cf331.exe
updateplatform_eaf76728f00b841dc9b3b1722f778e50ed59438a.exe
updateplatform_0456e6719c3ee098af03b785230ac020643fa1ac.exe
one of which gives when run gives a blue window "the app cant run on your PC"
Am I running the KB correctly or wrongly ? Please advise.
Hi,
It means the update is not applicable possibly due to a 3rd party AV installed.
You need to turn off the third-party antivirus for the updates to Windows Security.
no there is no third party antivirus installed.
you can simulate this in on a fresh windows server 2016 vm 64 bit installation without internet connection.
Just try to run the 3 exe file, one of them will have this error.
And you can tell me whether the antimalware ver has changed, I guarantee its still the same.
for your ref, on the exploit
https://itm4n.github.io/cve-2020-1170-windows-defender-eop/