Windows Defender

CVEs (30)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-8540	Microsoft Exchange Server	Hig	0.71	7.8	0.72	KEV	May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2018-0986	Microsoft Malware Protection Engine	Hig	0.65	8.8	0.61		Apr 4, 2018	A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,…
CVE-2017-0290	Microsoft Malware Protection Engine	Hig	0.60	7.8	0.77		May 9, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8541	Microsoft Malware Protection Engine	Hig	0.58	7.8	0.50		May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8538	Microsoft Malware Protection Engine	Hig	0.58	7.8	0.50		May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8558	Microsoft Malware Protection Engine	Hig	0.57	7.8	0.44		Jun 29, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703…
CVE-2017-8537	Microsoft Exchange Server	Med	0.40	5.5	0.17		May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8536	Microsoft Exchange Server	Med	0.40	5.5	0.17		May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8535	Microsoft Exchange Server	Med	0.40	5.5	0.17		May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8542	Microsoft Malware Protection Engine	Med	0.36	5.5	0.06		May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8539	Microsoft Malware Protection Engine	Med	0.36	5.5	0.06		May 26, 2017	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2021-1647	Microsoft Defender		0.18	—	0.40	KEV	Jan 12, 2021	Microsoft Defender Remote Code Execution Vulnerability
CVE-2006-5270	Microsoft Antigen		0.02	—	0.30		Feb 13, 2007	Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2019-1255	Microsoft Defender		0.01	—	0.04		Sep 23, 2019	A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
CVE-2008-1438	Microsoft Malware Protection Engine		0.01	—	0.13		May 13, 2008	Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures"…
CVE-2008-1437	Microsoft Malware Protection Engine		0.01	—	0.13		May 13, 2008	Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different…
CVE-2023-36422	Microsoft Windows Defender		0.00	—	0.01		Nov 14, 2023	Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2023-38163	Microsoft Windows Defender		0.00	—	0.01		Sep 12, 2023	Windows Defender Attack Surface Reduction Security Feature Bypass
CVE-2023-38175	Microsoft Windows Defender		0.00	—	0.01		Aug 8, 2023	Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2022-37971	Microsoft Windows Defender		0.00	—	0.01		Oct 11, 2022	Microsoft Windows Defender Elevation of Privilege Vulnerability

CVE-2017-8540HigKEVMay 26, 2017
Microsoft
Exchange Server
risk 0.71cvss 7.8epss 0.72
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2018-0986HigApr 4, 2018
Microsoft
Malware Protection Engine
risk 0.65cvss 8.8epss 0.61
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,…
CVE-2017-0290HigMay 9, 2017
Microsoft
Malware Protection Engine
risk 0.60cvss 7.8epss 0.77
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8541HigMay 26, 2017
Microsoft
Malware Protection Engine
risk 0.58cvss 7.8epss 0.50
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8538HigMay 26, 2017
Microsoft
Malware Protection Engine
risk 0.58cvss 7.8epss 0.50
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8558HigJun 29, 2017
Microsoft
Malware Protection Engine
risk 0.57cvss 7.8epss 0.44
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703…
CVE-2017-8537MedMay 26, 2017
Microsoft
Exchange Server
risk 0.40cvss 5.5epss 0.17
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8536MedMay 26, 2017
Microsoft
Exchange Server
risk 0.40cvss 5.5epss 0.17
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8535MedMay 26, 2017
Microsoft
Exchange Server
risk 0.40cvss 5.5epss 0.17
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8542MedMay 26, 2017
Microsoft
Malware Protection Engine
risk 0.36cvss 5.5epss 0.06
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2017-8539MedMay 26, 2017
Microsoft
Malware Protection Engine
risk 0.36cvss 5.5epss 0.06
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2021-1647KEVJan 12, 2021
Microsoft
Defender
risk 0.18cvss —epss 0.40
Microsoft Defender Remote Code Execution Vulnerability
CVE-2006-5270Feb 13, 2007
Microsoft
Antigen
risk 0.02cvss —epss 0.30
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2019-1255Sep 23, 2019
Microsoft
Defender
risk 0.01cvss —epss 0.04
A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
CVE-2008-1438May 13, 2008
Microsoft
Malware Protection Engine
risk 0.01cvss —epss 0.13
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures"…
CVE-2008-1437May 13, 2008
Microsoft
Malware Protection Engine
risk 0.01cvss —epss 0.13
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different…
CVE-2023-36422Nov 14, 2023
Microsoft
Windows Defender
risk 0.00cvss —epss 0.01
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2023-38163Sep 12, 2023
Microsoft
Windows Defender
risk 0.00cvss —epss 0.01
Windows Defender Attack Surface Reduction Security Feature Bypass
CVE-2023-38175Aug 8, 2023
Microsoft
Windows Defender
risk 0.00cvss —epss 0.01
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2022-37971Oct 11, 2022
Microsoft
Windows Defender
risk 0.00cvss —epss 0.01
Microsoft Windows Defender Elevation of Privilege Vulnerability

Page 1 of 2