TI-2021-01364 CVE-2021-1647 · GHSA-4v4q-r2mh-q7w6
Microsoft Defender Remote Code Execution Vulnerability
Priority CRITICAL 93KEV
Microsoft Defender Remote Code Execution Vulnerability
Microsoft
Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9
Exploited now
Microsoft records in CISA KEVTI-2026-79288 Google Brotli Unchecked Return Value Vulnerability TI-2026-73128 Microsoft Windows Command Injection Vulnerability TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability TI-2026-56567 Microsoft Windows Link Following Vulnerability TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
28 records in Windows Defender · all components
TI-2017-06074 CVE-2017-8540 · GHSA-342q-x494-83vw
Out-of-bounds write in Microsoft Malware Protection Engine
Priority CRITICAL 93KEV
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2017-00265 CVE-2017-0290 · GHSA-w3hq-vf6w-p52j
Memory corruption in Microsoft Malware Protection Engine
Priority HIGH 75
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2018-00915 CVE-2018-0986 · GHSA-v2gp-f824-rv7r
Out-of-bounds write in Microsoft Windows Defender
Priority HIGH 73
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Cod…
TI-2017-06072 CVE-2017-8538 · GHSA-vppm-w8jw-cghw
Memory corruption in Microsoft Malware Protection Engine
Priority HIGH 65
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2017-06075 CVE-2017-8541 · GHSA-vmvp-q95h-cjxj
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 64
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2006-05085 CVE-2006-5270 · GHSA-w9r9-5xpf-rvjr
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by…
Priority MEDIUM 64
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via…
TI-2017-06091 CVE-2017-8558 · GHSA-ghvf-8cx5-ch3h
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 63
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…
TI-2017-06071 CVE-2017-8537 · GHSA-gc65-2679-m9fc
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 42
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2017-06070 CVE-2017-8536 · GHSA-vghv-pmmq-mcwh
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 42
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2017-06069 CVE-2017-8535 · GHSA-h2pr-84p4-xhj2
Memory corruption in Microsoft Malware Protection Engine
Priority MEDIUM 42
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2019-00976 CVE-2019-1255 · GHSA-pr8x-gg94-wfq2
A denial of service vulnerability exists when Microsoft Defender improperly handles…
Priority MEDIUM 40
A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.
TI-2023-18282 CVE-2023-36422 · GHSA-m2vm-jcgv-q6x4
Microsoft Windows Defender Elevation of Privilege Vulnerability
Priority LOW 38
Microsoft Windows Defender Elevation of Privilege Vulnerability
TI-2023-19592 CVE-2023-38175 · GHSA-56r2-62gh-h7qr
Microsoft Windows Defender Elevation of Privilege Vulnerability
Priority LOW 37
Microsoft Windows Defender Elevation of Privilege Vulnerability
TI-2020-01134 CVE-2020-1170 · GHSA-92hx-wh5h-gmwr
Incorrect permission assignment in Microsoft Forefront Endpoint Protection
Priority LOW 37
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windo…
TI-2008-01380 CVE-2008-1438 · GHSA-w2f8-fjc5-vrwh
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll)…
Priority LOW 37
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk spa…
TI-2008-01379 CVE-2008-1437 · GHSA-ggmf-jrq4-84qj
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll)…
Priority LOW 37
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine h…
TI-2020-01128 CVE-2020-1163 · GHSA-r3xg-94cc-pwx3
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary…
Priority LOW 36
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windo…
TI-2020-00808 CVE-2020-0835 · GHSA-fj83-7fq4-4858
An elevation of privilege vulnerability exists when Windows Defender antimalware platform…
Priority LOW 36
An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability'.
TI-2021-06388 CVE-2021-24092 · GHSA-rh6f-h7jm-q6qr
Microsoft Defender Elevation of Privilege Vulnerability
Priority LOW 35
Microsoft Defender Elevation of Privilege Vulnerability
TI-2013-00032 CVE-2013-0078 · GHSA-ggpx-9gxx-fx4v
The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an…
Priority LOW 35
The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalwa…
TI-2011-00036 CVE-2011-0037 · GHSA-g9qh-rx87-crmv
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious…
Priority LOW 35
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, an…
TI-2017-06076 CVE-2017-8542 · GHSA-r39x-33q8-cxfv
Memory corruption in Microsoft Malware Protection
Priority LOW 34
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2017-06073 CVE-2017-8539 · GHSA-c797-4xm9-5jpw
Memory corruption in Microsoft Malware Protection Engine
Priority LOW 34
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
TI-2013-02752 CVE-2013-3154 · GHSA-gcrr-wmq9-gv5w
The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows…
Priority LOW 34
The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the…