TI-2021-01364 CVE-2021-1647 · GHSA-4v4q-r2mh-q7w6
Microsoft Defender Remote Code Execution Vulnerability
Priority CRITICAL 93KEV
Microsoft Defender Remote Code Execution Vulnerability
Microsoft
Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9
Exploited now
Microsoft records in CISA KEVTI-2026-79288 Google Brotli Unchecked Return Value Vulnerability TI-2026-73128 Microsoft Windows Command Injection Vulnerability TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability TI-2026-56567 Microsoft Windows Link Following Vulnerability TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
20 records in Security Essentials · all components
TI-2017-06074 CVE-2017-8540 · GHSA-342q-x494-83vw
Out-of-bounds write in Microsoft Malware Protection Engine
Priority CRITICAL 93KEV
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2018-00915 CVE-2018-0986 · GHSA-v2gp-f824-rv7r
Out-of-bounds write in Microsoft Windows Defender
Priority HIGH 73
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Cod…
TI-2012-01281 CVE-2012-1459 · GHSA-6jh3-f3f4-37w5
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir…
Priority HIGH 65
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…
TI-2012-01279 CVE-2012-1457 · GHSA-j7hj-5xvp-7w4p
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!…
Priority HIGH 65
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Co…
TI-2012-01275 CVE-2012-1453 · GHSA-q3xc-hm3w-5mx3
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky…
Priority HIGH 65
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Em…
TI-2012-01265 CVE-2012-1443 · GHSA-vpv6-p582-58cq
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat…
Priority HIGH 65
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…
TI-2012-01242 CVE-2012-1420 · GHSA-cvrw-mvxm-869j
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5…
Priority MEDIUM 64
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engin…
TI-2017-06091 CVE-2017-8558 · GHSA-ghvf-8cx5-ch3h
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 63
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…
TI-2017-06071 CVE-2017-8537 · GHSA-gc65-2679-m9fc
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 42
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2017-06070 CVE-2017-8536 · GHSA-vghv-pmmq-mcwh
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 42
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2017-06069 CVE-2017-8535 · GHSA-h2pr-84p4-xhj2
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 42
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2019-00976 CVE-2019-1255 · GHSA-pr8x-gg94-wfq2
A denial of service vulnerability exists when Microsoft Defender improperly handles…
Priority MEDIUM 40
A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
TI-2020-01134 CVE-2020-1170 · GHSA-92hx-wh5h-gmwr
Incorrect permission assignment in Microsoft Forefront Endpoint Protection
Priority LOW 37
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windo…
TI-2020-01128 CVE-2020-1163 · GHSA-r3xg-94cc-pwx3
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary…
Priority LOW 36
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windo…
TI-2021-06388 CVE-2021-24092 · GHSA-rh6f-h7jm-q6qr
Microsoft Defender Elevation of Privilege Vulnerability
Priority LOW 35
Microsoft Defender Elevation of Privilege Vulnerability
TI-2011-00036 CVE-2011-0037 · GHSA-g9qh-rx87-crmv
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious…
Priority LOW 35
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, an…
TI-2020-01420 CVE-2020-1461 · GHSA-v4pf-jxx8-c862
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows…
Priority LOW 33
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Micr…
TI-2020-00971 CVE-2020-1002 · GHSA-xvh7-j354-hww5
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows…
Priority LOW 33
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Micr…
TI-2019-00887 CVE-2019-1161 · GHSA-32j3-hv3j-q9qq
Microsoft Defender Elevation of Privilege Vulnerability
Priority LOW 33
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.