Microsoft Malware Protection Engine vulnerabilities
17 vulnerabilities
Known vulnerabilities in Microsoft Malware Protection Engine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-42298microsoftmalware_protection_engine+1
EPSS score5.85%
Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-31985microsoftmalware_protection_engine+1EPSS score7.76%
Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-31978microsoftmalware_protection_engine+1EPSS score1.23%
Microsoft Defender Denial of Service VulnerabilityCVE-2021-34522microsoftmalware_protection_engine+1EPSS score2.72%
Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-34464microsoftmalware_protection_engine+1EPSS score2.64%
Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-34471microsoftmalware_protection_engine+1EPSS score0.51%
Microsoft Defender Elevation of Privilege VulnerabilityCVE-2022-37971microsoftmalware_protection_engine+1EPSS score0.70%
Microsoft Windows Defender Elevation of Privilege VulnerabilityCVE-2022-24548microsoftmalware_protection_engine+1EPSS score3.01%
Microsoft Defender Denial of Service VulnerabilityCVE-2026-41091microsoftmalware_protection_engine+1KEVEPSS score0.44%
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.CVE-2026-55012microsoftmalware_protection_engine+1EPSS score0.47%
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.CVE-2026-55011microsoftmalware_protection_engine+1EPSS score0.47%
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.CVE-2026-69414microsoftmalware_protection_engine+1EPSS score1.32%
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".CVE-2026-45584microsoftmalware_protection_engine+1EPSS score0.71%
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.CVE-2026-50656microsoftmalware_protection_engine+1EPSS score0.37%
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".CVE-2023-24860microsoftmalware_protection_engine+1EPSS score3.07%
Microsoft Defender Denial of Service VulnerabilityCVE-2023-33156microsoftmalware_protection_engine+1EPSS score0.27%
Microsoft Defender Elevation of Privilege VulnerabilityCVE-2023-23389microsoftmalware_protection_engine+1EPSS score0.26%
Microsoft Defender Elevation of Privilege Vulnerability