MP
Product
Malware Protection Engine
On CISA KEVExploited in the wild
31
CVEs
2
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 20Medium 5Low 0
Watch
Add Malware Protection Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41091 In wildKEV | 7.8 | May 20 | Microsoft Defender Elevation of Privilege Vulnerability Affected: 1.1.26030.3008 before 1.1.26040.8 |
| CVE-2017-8540 In wildKEV | 7.8 | May 26 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Affected: 1.1.13701.0 before 1.1.13704.0 |
| CVE-2026-45584 | 8.1 | May 20 | Microsoft Defender Remote Code Execution Vulnerability Affected: 1.1.26030.3008 before 1.1.26040.8 |
| CVE-2026-69414 | 7.8 | Aug 14 | Microsoft Defender Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-55012 | 7.8 | Jul 14 | Microsoft Defender Remote Code Execution Vulnerability Affected: before 1.1.26060.3008 |
| CVE-2026-55011 | 7.8 | Jul 14 | Microsoft Defender Remote Code Execution Vulnerability Affected: before 1.1.26060.3008 |
| CVE-2021-42298 | 7.8 | Nov 10 | Microsoft Defender Remote Code Execution Vulnerability Affected: before 1.1.18700.3 |
| CVE-2021-34471 | 7.8 | Aug 12 | Microsoft Defender Elevation of Privilege Vulnerability Affected: before 1.1.18400.4 |
| CVE-2021-34464 | 7.8 | Jul 16 | Microsoft Defender Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-34522 | 7.8 | Jul 14 | Microsoft Defender Remote Code Execution Vulnerability Affected: before 1.1.18242.0 |
| CVE-2021-31985 | 7.8 | Jun 8 | Microsoft Defender Remote Code Execution Vulnerability Affected: before 1.1.18200.3 |
| CVE-2017-11940 | 7.8 | Dec 8 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703,… Affected: through 1.1.14306.0 |
| CVE-2017-11937 | 7.8 | Dec 7 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703,… Affected: through 1.1.14306.0 |
| CVE-2017-8541 | 7.8 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: through 1.1.13704.0 |
| CVE-2017-8538 | 7.8 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: through 1.1.13704.0 |
| CVE-2017-0290 | 7.8 | May 9 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: through 1.1.13701.0 |
| CVE-2023-24860 | 7.5 | Apr 11 | Microsoft Defender Denial of Service Vulnerability Affected: before 1.1.20200.4 |
| CVE-2022-37971 | 7.1 | Oct 11 | Microsoft Windows Defender Elevation of Privilege Vulnerability Affected: before 1.1.19700.2 |
| CVE-2026-50656 | 7.0 | Jun 16 | Microsoft Defender Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-33156 | 7.0 | Jul 11 | Microsoft Defender Elevation of Privilege Vulnerability Affected: before 1.1.23050.3 |
| CVE-2023-23389 | 6.3 | Mar 14 | Microsoft Defender Elevation of Privilege Vulnerability Affected: 1.1.20000.2 |
| CVE-2022-24548 | 5.5 | Apr 15 | Microsoft Defender Denial of Service Vulnerability Affected: before 1.1.19100.5 |
| CVE-2021-31978 | 5.5 | Jun 8 | Microsoft Defender Denial of Service Vulnerability Affected: before 1.1.18200.3 |
| CVE-2017-8542 | 5.5 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: through 1.1.13704.0 |
| CVE-2017-8539 | 5.5 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: through 1.1.13704.0 |
| CVE-2014-2779 | – | Jun 18 | mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) via a crafted file Affected: through 1.1.10600.0 |
| CVE-2013-1346 | – | May 15 | mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: through 1.1.9402.0 |
| CVE-2011-0037 | – | Feb 25 | Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client… Affected: through 1.1.6502.0; 0.1.13.192; 1.1.3520.0 |
| CVE-2008-1438 | – | May 13 | Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent… Affected: 0.1.13.192; 1.1.3520.0 |
| CVE-2008-1437 | – | May 13 | Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent… Affected: 0.1.13.192; 1.1.3520.0 |
| CVE-2006-5270 | – | Feb 13 | Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote… Affected: All versions, or not specified |
Showing 31