Priority HIGH 69
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01374 · Published 2026-08-14 · Fixed in 1.1.26080.3 CWE-59
Priority LOW 36
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in 1.1.26060.3008 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in 1.1.26060.3008 CWE-191
Priority HIGH 69
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.11163 · Published 2026-06-16 · Fixed in 1.1.26060.3008 CWE-59
Priority LOW 39
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00852 · Published 2026-05-20 · Fixed in 1.1.26040.8 CWE-122
Priority CRITICAL 93KEV
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.08202 · Published 2026-05-20 · Fixed in 1.1.26040.8 CWE-59
Priority LOW 31
Microsoft Defender Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00274 · Published 2023-07-11 · Fixed in 1.1.23050.3 CWE-367
Priority MEDIUM 44
Microsoft Defender Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03074 · Published 2023-04-11 · Fixed in 1.1.20200.4 CWE-400
Priority LOW 28
Microsoft Defender Elevation of Privilege Vulnerability
CVSS 3.1MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2023-03-14 · Fixed in 1.1.20000.2 CWE-367
Priority LOW 32
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00697 · Published 2022-10-11 · Fixed in 1.1.19700.2
Priority LOW 30
Microsoft Defender Denial of Service Vulnerability
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.03009 · Published 2022-04-15 · Fixed in 1.1.19100.5
Priority MEDIUM 43
Microsoft Defender Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.05848 · Published 2021-11-10 · Fixed in 1.1.18700.3 CWE-94
Priority LOW 35
Microsoft Defender Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00509 · Published 2021-08-12 · Fixed in 1.1.18400.4 CWE-269
Priority LOW 39
Microsoft Defender Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02643 · Published 2021-07-16 · Fixed in 1.1.18242.0
Priority LOW 39
Microsoft Defender Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02721 · Published 2021-07-14 · Fixed in 1.1.18242.0
Priority MEDIUM 49
Microsoft Defender Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.07764 · Published 2021-06-08 · Fixed in Version 1.1.18200.3
Priority LOW 27
Microsoft Defender Denial of Service Vulnerability
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01225 · Published 2021-06-08 · Fixed in Version 1.1.18200.3
Priority MEDIUM 53
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Se…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.2051 · Published 2017-12-08 · No fix listed CWE-119
Priority MEDIUM 57
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Se…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.28327 · Published 2017-12-07 · No fix listed CWE-119
Priority LOW 34
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.06021 · Published 2017-05-26 · No fix listed CWE-119
Priority MEDIUM 64
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.4812 · Published 2017-05-26 · No fix listed CWE-119
Priority CRITICAL 93KEV
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.71874 · Published 2017-05-26 · No fix listed CWE-787
Priority LOW 34
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.06021 · Published 2017-05-26 · No fix listed CWE-119
Priority HIGH 65
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.5 · Published 2017-05-26 · No fix listed CWE-119
Priority HIGH 75
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.81421 · Published 2017-05-09 · No fix listed CWE-119
Load more
THREATIST.IORead the docs