Microsoft Malware Protection Engine vulnerabilities, page 2
30 vulnerabilities
Known vulnerabilities in Microsoft Malware Protection Engine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-8542microsoft corporationmalware protection+3
EPSS score6.02%
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8539.CVE-2026-41091microsoftmalware_protection_engine+1KEVEPSS score0.44%
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.CVE-2026-55012microsoftmalware_protection_engine+1EPSS score0.47%
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.CVE-2026-55011microsoftmalware_protection_engine+1EPSS score0.47%
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.CVE-2026-69414microsoftmalware_protection_engine+1EPSS score1.32%
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".CVE-2026-45584microsoftmalware_protection_engine+1EPSS score0.71%
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.CVE-2026-50656microsoftmalware_protection_engine+1EPSS score0.37%
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".CVE-2023-24860microsoftmalware_protection_engine+1EPSS score3.07%
Microsoft Defender Denial of Service VulnerabilityCVE-2023-33156microsoftmalware_protection_engine+1EPSS score0.27%
Microsoft Defender Elevation of Privilege VulnerabilityCVE-2023-23389microsoftmalware_protection_engine+1EPSS score0.26%
Microsoft Defender Elevation of Privilege Vulnerability