Malware Protection Engine
by Microsoft
CVEs (37)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-8540 | Hig | 0.71 | 7.8 | 0.72 | KEV | May 26, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… | |
| CVE-2018-0986 | Hig | 0.65 | 8.8 | 0.63 | Apr 4, 2018 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,… | ||
| CVE-2026-41091 | Hig | 0.63 | 7.8 | 0.10 | KEV | May 20, 2026 | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. | |
| CVE-2017-0290 | Hig | 0.60 | 7.8 | 0.77 | May 9, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… | ||
| CVE-2017-8541 | Hig | 0.58 | 7.8 | 0.50 | May 26, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… | ||
| CVE-2017-8538 | Hig | 0.58 | 7.8 | 0.50 | May 26, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… | ||
| CVE-2017-8558 | Hig | 0.57 | 7.8 | 0.44 | Jun 29, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703… | ||
| CVE-2026-45584 | Hig | 0.53 | 8.1 | 0.01 | May 20, 2026 | Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network. | ||
| CVE-2017-11937 | Hig | 0.53 | 7.8 | 0.28 | Dec 7, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and… | ||
| CVE-2026-50656 | Hig | 0.52 | 7.8 | 0.11 | Jun 16, 2026 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". | ||
| CVE-2017-11940 | Hig | 0.52 | 7.8 | 0.20 | Dec 8, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and… | ||
| CVE-2021-42298 | Hig | 0.51 | 7.8 | 0.05 | Nov 10, 2021 | Microsoft Defender Remote Code Execution Vulnerability | ||
| CVE-2021-34471 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2021 | Microsoft Defender Elevation of Privilege Vulnerability | ||
| CVE-2021-34464 | Hig | 0.51 | 7.8 | 0.03 | Jul 16, 2021 | Microsoft Defender Remote Code Execution Vulnerability | ||
| CVE-2021-34522 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Microsoft Defender Remote Code Execution Vulnerability | ||
| CVE-2021-31985 | Hig | 0.51 | 7.8 | 0.08 | Jun 8, 2021 | Microsoft Defender Remote Code Execution Vulnerability | ||
| CVE-2023-36010 | Hig | 0.49 | 7.5 | 0.03 | Dec 12, 2023 | Microsoft Defender Denial of Service Vulnerability | ||
| CVE-2023-24860 | Hig | 0.49 | 7.5 | 0.03 | Apr 11, 2023 | Microsoft Defender Denial of Service Vulnerability | ||
| CVE-2022-37971 | Hig | 0.46 | 7.1 | 0.01 | Oct 11, 2022 | Microsoft Windows Defender Elevation of Privilege Vulnerability | ||
| CVE-2023-33156 | Med | 0.41 | 6.3 | 0.00 | Jul 11, 2023 | Microsoft Defender Elevation of Privilege Vulnerability |
- risk 0.71cvss 7.8epss 0.72
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
- risk 0.65cvss 8.8epss 0.63
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,…
- risk 0.63cvss 7.8epss 0.10
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- risk 0.60cvss 7.8epss 0.77
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
- risk 0.58cvss 7.8epss 0.50
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
- risk 0.58cvss 7.8epss 0.50
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
- risk 0.57cvss 7.8epss 0.44
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703…
- risk 0.53cvss 8.1epss 0.01
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 7.8epss 0.28
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and…
- risk 0.52cvss 7.8epss 0.11
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
- risk 0.52cvss 7.8epss 0.20
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and…
- risk 0.51cvss 7.8epss 0.05
Microsoft Defender Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Defender Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Defender Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Defender Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.08
Microsoft Defender Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Defender Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Defender Denial of Service Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Windows Defender Elevation of Privilege Vulnerability
- risk 0.41cvss 6.3epss 0.00
Microsoft Defender Elevation of Privilege Vulnerability
Page 1 of 2