Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

31 records in Malware Protection Engine · all components

Priority CRITICAL 93KEV

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08202 Published 2026-05-20 Fixed in 1.1.26040.8 CWE-59
Priority CRITICAL 93KEV

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.71874 Published 2017-05-26 No fix listed CWE-787
Priority HIGH 75

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.81421 Published 2017-05-09 No fix listed CWE-119
Priority HIGH 69

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01374 Published 2026-08-14 Fixed in 1.1.26080.3 CWE-59
Priority HIGH 69

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11163 Published 2026-06-16 Fixed in 1.1.26060.3008 CWE-59
Priority HIGH 65

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.5 Published 2017-05-26 No fix listed CWE-119
Priority MEDIUM 64

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.4812 Published 2017-05-26 No fix listed CWE-119
Priority MEDIUM 57

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Se…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.28327 Published 2017-12-07 No fix listed CWE-119
Priority MEDIUM 53

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Se…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.2051 Published 2017-12-08 No fix listed CWE-119
Priority LOW 39

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00852 Published 2026-05-20 Fixed in 1.1.26040.8 CWE-122
Priority LOW 37

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk spa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.12938 Published 2008-05-13 No fix listed CWE-399
Priority LOW 37

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine h…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.12938 Published 2008-05-13 No fix listed CWE-399
Priority LOW 36

Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in 1.1.26060.3008 CWE-122
Priority LOW 36

Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in 1.1.26060.3008 CWE-191
Priority LOW 34

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.06021 Published 2017-05-26 No fix listed CWE-119
Load more
Open these records in search →