WD
Product
Windows Defender
On CISA KEVExploited in the wild
29
CVEs
2
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 17Medium 6Low 0
Watch
Add Windows Defender to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1647 In wildKEV | 7.8 | Jan 12 | Microsoft Defender Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2017-8540 In wildKEV | 7.8 | May 26 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Affected: All versions, or not specified |
| CVE-2018-0986 | 8.8 | Apr 4 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka… Affected: All versions, or not specified |
| CVE-2023-36422 | 7.8 | Nov 14 | Microsoft Windows Defender Elevation of Privilege Vulnerability Affected: before 4.18.23100.2009 |
| CVE-2023-38175 | 7.8 | Aug 8 | Microsoft Windows Defender Elevation of Privilege Vulnerability Affected: before 1.1.23060.3001 |
| CVE-2021-24092 | 7.8 | Feb 25 | Microsoft Defender Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2020-1170 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to… Affected: All versions, or not specified |
| CVE-2020-1163 | 7.8 | Jun 9 | An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to… Affected: All versions, or not specified |
| CVE-2020-0835 | 7.8 | Apr 15 | An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link… Affected: All versions, or not specified |
| CVE-2017-8558 | 7.8 | Jun 29 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,… Affected: All versions, or not specified |
| CVE-2017-8541 | 7.8 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2017-8538 | 7.8 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2017-0290 | 7.8 | May 9 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2019-1255 | 7.5 | Sep 23 | A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability' Affected: All versions, or not specified |
| CVE-2020-1461 | 7.1 | Jul 14 | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would… Affected: All versions, or not specified |
| CVE-2020-1002 | 7.1 | Apr 15 | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would… Affected: All versions, or not specified |
| CVE-2019-1161 | 7.1 | Aug 14 | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations Affected: All versions, or not specified |
| CVE-2026-70264 | 5.5 | Oct 13 | Microsoft Defender Information Disclosure Vulnerability Affected: before 1.1.26090.9 |
| CVE-2017-8542 | 5.5 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2017-8539 | 5.5 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2017-8537 | 5.5 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2017-8536 | 5.5 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2017-8535 | 5.5 | May 26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Affected: All versions, or not specified |
| CVE-2013-3154 | – | Jul 10 | The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain… Affected: All versions, or not specified |
| CVE-2013-0078 | – | Apr 9 | The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a… Affected: All versions, or not specified |
| CVE-2011-0037 | – | Feb 25 | Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client… Affected: All versions, or not specified |
| CVE-2008-1438 | – | May 13 | Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent… Affected: All versions, or not specified |
| CVE-2008-1437 | – | May 13 | Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent… Affected: All versions, or not specified |
| CVE-2006-5270 | – | Feb 13 | Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote… Affected: All versions, or not specified |
Showing 29
